Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2008-1142

rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.

  • Published: Apr 7, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-1142
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.7
  • AV:L/AC:H/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
rxvt-unicode / rxvt-unicode 2.5 2.5.x
aterm / aterm 0.3.1 0.3.1.x
rxvt / rxvt 2.7.5 2.7.5.x
rxvt-unicode / rxvt-unicode - 9.01.x
multi-aterm / multi-aterm 0.0.5 0.0.5.x
aterm / aterm 1.00-beta4 1.00-beta4.x
rxvt-unicode / rxvt-unicode 1.3 1.3.x
rxvt-unicode / rxvt-unicode 3.4 3.4.x
rxvt-unicode / rxvt-unicode 5.1 5.1.x
rxvt-unicode / rxvt-unicode 7.2 7.2.x
rxvt-unicode / rxvt-unicode 2.3 2.3.x
rxvt-unicode / rxvt-unicode 3.1 3.1.x
rxvt-unicode / rxvt-unicode 1.8 1.8.x
rxvt-unicode / rxvt-unicode 5.0 5.0.x
rxvt-unicode / rxvt-unicode 3.9 3.9.x
rxvt-unicode / rxvt-unicode 4.0 4.0.x
rxvt-unicode / rxvt-unicode 7.1 7.1.x
rxvt-unicode / rxvt-unicode 5.5 5.5.x
rxvt-unicode / rxvt-unicode 6.2 6.2.x
rxvt / rxvt - 2.7.9.x
multi-aterm / multi-aterm 0.0.1 0.0.1.x
rxvt / rxvt 2.6.4 2.6.4.x
rxvt-unicode / rxvt-unicode 5.4 5.4.x
rxvt-unicode / rxvt-unicode 7.0 7.0.x
aterm / aterm 0.3.3 0.3.3.x
rxvt-unicode / rxvt-unicode 2.8 2.8.x
aterm / aterm 1.00-beta1 1.00-beta1.x
aterm / aterm 0.4.0 0.4.0.x
rxvt-unicode / rxvt-unicode 4.2 4.2.x
multi-aterm / multi-aterm - 0.2.x
rxvt-unicode / rxvt-unicode 2.0 2.0.x
rxvt-unicode / rxvt-unicode 8.1 8.1.x
rxvt-unicode / rxvt-unicode 5.3 5.3.x
rxvt / rxvt 2.7.8 2.7.8.x
rxvt / rxvt 2.6.1 2.6.1.x
aterm / aterm 0.1.0 0.1.0.x
rxvt-unicode / rxvt-unicode 1.0 1.0.x
rxvt-unicode / rxvt-unicode 1.91 1.91.x
aterm / aterm - 1.0.0.x
aterm / aterm 1.00-beta3 1.00-beta3.x
rxvt-unicode / rxvt-unicode 5.6 5.6.x
rxvt-unicode / rxvt-unicode 2.6 2.6.x
eterm / eterm - 0.9.3.x
rxvt-unicode / rxvt-unicode 7.7 7.7.x
rxvt-unicode / rxvt-unicode 3.3 3.3.x
rxvt-unicode / rxvt-unicode 7.5 7.5.x
rxvt-unicode / rxvt-unicode 2.4 2.4.x
rxvt-unicode / rxvt-unicode 8.3 8.3.x
rxvt-unicode / rxvt-unicode 7.8 7.8.x
rxvt-unicode / rxvt-unicode 4.4 4.4.x
aterm / aterm 0.3.6 0.3.6.x
rxvt / rxvt 2.7.6 2.7.6.x
rxvt-unicode / rxvt-unicode 4.3 4.3.x
aterm / aterm 0.3.4 0.3.4.x
aterm / aterm 0.1.1 0.1.1.x
aterm / aterm 0.3.0 0.3.0.x
multi-aterm / multi-aterm 0.1 0.1.x
rxvt-unicode / rxvt-unicode 1.5 1.5.x
rxvt-unicode / rxvt-unicode 8.9 8.9.x
mrxvt / mrxvt 0.4.2 0.4.2.x
rxvt-unicode / rxvt-unicode 8.8 8.8.x
rxvt-unicode / rxvt-unicode 2.1 2.1.x
rxvt-unicode / rxvt-unicode 3.2 3.2.x
rxvt / rxvt 2.7.7 2.7.7.x
multi-aterm / multi-aterm 0.0.3 0.0.3.x
rxvt-unicode / rxvt-unicode 2.2 2.2.x
rxvt-unicode / rxvt-unicode 4.8 4.8.x
rxvt-unicode / rxvt-unicode 1.1 1.1.x
rxvt-unicode / rxvt-unicode 6.3 6.3.x
rxvt-unicode / rxvt-unicode 4.7 4.7.x
wterm / wterm - 6.2.8a2.x
rxvt-unicode / rxvt-unicode 5.8 5.8.x
aterm / aterm 0.3.2 0.3.2.x
mrxvt / mrxvt - 0.5.2.x
eterm / eterm 0.9.2 0.9.2.x
rxvt-unicode / rxvt-unicode 3.6 3.6.x
wterm / wterm 6.2.6 6.2.6.x
rxvt-unicode / rxvt-unicode 5.9 5.9.x
rxvt-unicode / rxvt-unicode 3.8 3.8.x
rxvt-unicode / rxvt-unicode 8.5 8.5.x
rxvt-unicode / rxvt-unicode 8.4 8.4.x
rxvt-unicode / rxvt-unicode 1.6 1.6.x
rxvt-unicode / rxvt-unicode 4.5 4.5.x
rxvt-unicode / rxvt-unicode 3.7 3.7.x
rxvt-unicode / rxvt-unicode 4.1 4.1.x
rxvt-unicode / rxvt-unicode 8.7 8.7.x
rxvt-unicode / rxvt-unicode 6.0 6.0.x
aterm / aterm 0.4.1 0.4.1.x
wterm / wterm 6.2.5 6.2.5.x
multi-aterm / multi-aterm 0.0.4 0.0.4.x
rxvt / rxvt 2.6.2 2.6.2.x
rxvt-unicode / rxvt-unicode 7.3 7.3.x
aterm / aterm 0.3.5 0.3.5.x
rxvt-unicode / rxvt-unicode 2.7 2.7.x
aterm / aterm 0.2.0 0.2.0.x
rxvt-unicode / rxvt-unicode 8.5a 8.5a.x
aterm / aterm 1.00-beta2 1.00-beta2.x
rxvt-unicode / rxvt-unicode 5.2 5.2.x
rxvt-unicode / rxvt-unicode 6.1 6.1.x
aterm / aterm 0.4.2 0.4.2.x
rxvt-unicode / rxvt-unicode 8.6 8.6.x
rxvt / rxvt 2.6.3 2.6.3.x
rxvt-unicode / rxvt-unicode 4.9 4.9.x
rxvt-unicode / rxvt-unicode 1.7 1.7.x
rxvt-unicode / rxvt-unicode 2.9 2.9.x
rxvt-unicode / rxvt-unicode 7.4 7.4.x
rxvt-unicode / rxvt-unicode 9.0 9.0.x
rxvt-unicode / rxvt-unicode 7.9 7.9.x
rxvt-unicode / rxvt-unicode 7.6 7.6.x
rxvt-unicode / rxvt-unicode 8.2 8.2.x
rxvt-unicode / rxvt-unicode 5.7 5.7.x
rxvt-unicode / rxvt-unicode 4.6 4.6.x
rxvt-unicode / rxvt-unicode 3.5 3.5.x
rxvt-unicode / rxvt-unicode 8.0 8.0.x
rxvt-unicode / rxvt-unicode 3.0 3.0.x
rxvt-unicode / rxvt-unicode 1.4 1.4.x
rxvt-unicode / rxvt-unicode 1.9 1.9.x
rxvt-unicode / rxvt-unicode 1.2 1.2.x