PT-2009-2834 · Apple+1 · Xterm+2

Published 2009-02-13 · Updated 2024-01-25 · CVE-2009-0141

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions XTerm in Apple Mac OS X versions 10.4.11 through 10.5.6

Description The issue allows local users to write to the XTerm of another user due to insecure world-writable permissions on tty devices created when XTerm is used with luit.

Recommendations For XTerm in Apple Mac OS X versions 10.4.11 through 10.5.6, consider restricting access to the tty devices created by XTerm when used with luit to prevent unauthorized writing to another user's XTerm.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2009-0141

Affected Products

Macos X

Xterm

Luit

References · 8

• http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0141 · Security Note
• http://vupen.com/english/advisories/2009/0422 · Note
• http://securityfocus.com/bid/33798 · Note
• http://secunia.com/advisories/33937 · Note
• http://securitytracker.com/alerts/2009/Feb/1021729.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48727 · Note
• http://support.apple.com/kb/HT3438 · Note