ISOMAN

CVE

CVE-2007-2797

xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals.

Severity
LOW
CVSS
2.1
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Debian13.5.0 amd64 netinstunknownsource
Debian13.5.0 amd64 edu netinstunknownsource
Debian13.5.0 amd64 mac netinstunknownsource
Debian13.5.0 arm64 netinstunknownsource
Debian13.5.0 amd64 dvd-1unknownsource
Debian13.5.0 arm64 dvd-1unknownsource
Debian13.5.0 amd64 live gnomeunknownsource
Debian13.5.0 amd64 live kdeunknownsource
Debian13.5.0 amd64 live cinnamonunknownsource
Debian13.5.0 amd64 live lxdeunknownsource
Debian13.5.0 amd64 live lxqtunknownsource
Debian13.5.0 amd64 live mateunknownsource
Debian13.5.0 amd64 live xfceunknownsource
Debian13.5.0 amd64 live standardunknownsource
Debian13.5.0 amd64 live debian-juniorunknownsource
Debian13.5.0 armhf netinstunknownsource
Debian13.5.0 ppc64el netinstunknownsource
Debian13.5.0 riscv64 netinstunknownsource
Debian13.5.0 s390x netinstunknownsource
Debian13.5.0 armhf dvd-1unknownsource
Debian13.5.0 ppc64el dvd-1unknownsource
Debian13.5.0 riscv64 dvd-1unknownsource
Debian13.5.0 s390x dvd-1unknownsource
Debian13.6.0 amd64 netinstunknownsource
Debian13.6.0 amd64 edu netinstunknownsource
Debian13.6.0 amd64 mac netinstunknownsource
Debian13.6.0 arm64 netinstunknownsource
Debian13.6.0 amd64 dvd-1unknownsource
Debian13.6.0 arm64 dvd-1unknownsource
Debian13.6.0 amd64 live gnomeunknownsource
Debian13.6.0 amd64 live kdeunknownsource
Debian13.6.0 amd64 live cinnamonunknownsource
Debian13.6.0 amd64 live lxdeunknownsource
Debian13.6.0 amd64 live lxqtunknownsource
Debian13.6.0 amd64 live mateunknownsource
Debian13.6.0 amd64 live xfceunknownsource
Debian13.6.0 amd64 live standardunknownsource
Debian13.6.0 amd64 live debian-juniorunknownsource
Debian13.6.0 armhf netinstunknownsource
Debian13.6.0 ppc64el netinstunknownsource
Debian13.6.0 riscv64 netinstunknownsource
Debian13.6.0 s390x netinstunknownsource
Debian13.6.0 armhf dvd-1unknownsource
Debian13.6.0 ppc64el dvd-1unknownsource
Debian13.6.0 riscv64 dvd-1unknownsource
Debian13.6.0 s390x dvd-1unknownsource

References

  1. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349924
  2. http://secunia.com/advisories/26562
  3. http://secunia.com/advisories/27617
  4. http://secunia.com/advisories/27921
  5. http://securityreason.com/securityalert/3066
  6. http://support.avaya.com/elmodocs2/security/ASA-2007-490.htm
  7. http://www.redhat.com/support/errata/RHSA-2007-0701.html
  8. http://www.securityfocus.com/archive/1/477469/100/0/threaded
  9. http://www.securityfocus.com/archive/1/477632/100/100/threaded
  10. http://www.securityfocus.com/bid/26710
  11. https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=239070
  12. https://issues.rpath.com/browse/RPL-1396
  13. https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10421
  14. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349924
  15. http://secunia.com/advisories/26562
  16. http://secunia.com/advisories/27617
  17. http://secunia.com/advisories/27921
  18. http://securityreason.com/securityalert/3066
  19. http://support.avaya.com/elmodocs2/security/ASA-2007-490.htm
  20. http://www.redhat.com/support/errata/RHSA-2007-0701.html