1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
|
<?xml version="1.0" encoding="utf-8"?>
<?xml-stylesheet href="/xsl/glsa.xsl" type="text/xsl"?>
<?xml-stylesheet href="/xsl/guide.xsl" type="text/xsl"?>
<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
<glsa id="200805-03">
<title>Multiple X11 terminals: Local privilege escalation</title>
<synopsis>
A vulnerability was found in aterm, Eterm, Mrxvt, multi-aterm, RXVT,
rxvt-unicode, and wterm, allowing for local privilege escalation.
</synopsis>
<product type="ebuild">aterm eterm rxvt mrxvt multi-aterm wterm rxvt-unicode</product>
<announced>May 07, 2008</announced>
<revised>May 10, 2008: 02</revised>
<bug>216833</bug>
<bug>217819</bug>
<bug>219746</bug>
<bug>219750</bug>
<bug>219754</bug>
<bug>219760</bug>
<bug>219762</bug>
<access>local</access>
<affected>
<package name="x11-terms/aterm" auto="yes" arch="*">
<unaffected range="ge">1.0.1-r1</unaffected>
<vulnerable range="lt">1.0.1-r1</vulnerable>
</package>
<package name="x11-terms/eterm" auto="yes" arch="*">
<unaffected range="ge">0.9.4-r1</unaffected>
<vulnerable range="lt">0.9.4-r1</vulnerable>
</package>
<package name="x11-terms/mrxvt" auto="yes" arch="*">
<unaffected range="ge">0.5.3-r2</unaffected>
<vulnerable range="lt">0.5.3-r2</vulnerable>
</package>
<package name="x11-terms/multi-aterm" auto="yes" arch="*">
<unaffected range="ge">0.2.1-r1</unaffected>
<vulnerable range="lt">0.2.1-r1</vulnerable>
</package>
<package name="x11-terms/rxvt" auto="yes" arch="*">
<unaffected range="ge">2.7.10-r4</unaffected>
<vulnerable range="lt">2.7.10-r4</vulnerable>
</package>
<package name="x11-terms/rxvt-unicode" auto="yes" arch="*">
<unaffected range="ge">9.02-r1</unaffected>
<vulnerable range="lt">9.02-r1</vulnerable>
</package>
<package name="x11-terms/wterm" auto="yes" arch="*">
<unaffected range="ge">6.2.9-r3</unaffected>
<vulnerable range="lt">6.2.9-r3</vulnerable>
</package>
</affected>
<background>
<p>
Aterm, Eterm, Mrxvt, multi-aterm, RXVT, rxvt-unicode, and wterm are X11
terminal emulators.
</p>
</background>
<description>
<p>
Bernhard R. Link discovered that RXVT opens a terminal on :0 if the
"-display" option is not specified and the DISPLAY environment variable
is not set. Further research by the Gentoo Security Team has shown that
aterm, Eterm, Mrxvt, multi-aterm, rxvt-unicode, and wterm are also
affected.
</p>
</description>
<impact type="normal">
<p>
A local attacker could exploit this vulnerability to hijack X11
terminals of other users.
</p>
</impact>
<workaround>
<p>
There is no known workaround at this time.
</p>
</workaround>
<resolution>
<p>
All aterm users should upgrade to the latest version:
</p>
<code>
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-terms/aterm-1.0.1-r1"</code>
<p>
All Eterm users should upgrade to the latest version:
</p>
<code>
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-terms/eterm-0.9.4-r1"</code>
<p>
All Mrxvt users should upgrade to the latest version:
</p>
<code>
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-terms/mrxvt-0.5.3-r2"</code>
<p>
All multi-aterm users should upgrade to the latest version:
</p>
<code>
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-terms/multi-aterm-0.2.1-r1"</code>
<p>
All RXVT users should upgrade to the latest version:
</p>
<code>
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-terms/rxvt-2.7.10-r4"</code>
<p>
All rxvt-unicode users should upgrade to the latest version:
</p>
<code>
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-terms/rxvt-unicode-9.02-r1"</code>
<p>
All wterm users should upgrade to the latest version:
</p>
<code>
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-terms/wterm-6.2.9-r3"</code>
</resolution>
<references>
<uri link="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1142">CVE-2008-1142</uri>
<uri link="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1692">CVE-2008-1692</uri>
</references>
<metadata tag="requester" timestamp="Tue, 29 Apr 2008 13:00:54 +0000">
keytoaster
</metadata>
<metadata tag="submitter" timestamp="Tue, 29 Apr 2008 13:12:03 +0000">
keytoaster
</metadata>
<metadata tag="bugReady" timestamp="Wed, 07 May 2008 18:53:21 +0000">
keytoaster
</metadata>
</glsa>
|
GitWeb