CVE-2007-0823 - xterm on Slackware Linux 10.2 stores information that had been displayed for a different user accoun

CVE-2007-0823

Summary

xterm on Slackware Linux 10.2 stores information that had been displayed for a different user account using the same xterm process, which might allow local users to bypass file permissions and read other users' files, or obtain other sensitive information, by reading the xterm process memory. NOTE: it could be argued that this is an expected consequence of multiple users sharing the same interactive process, in which case this is not a vulnerability.

References

Vulnerable Configurations

cpe:2.3:o:slackware:slackware_linux:10.2:*:*:*:*:*:*:*
cpe:2.3:o:slackware:slackware_linux:10.2:*:*:*:*:*:*:*

CVSS

Base:	1.9 (as of 15-11-2008 - 06:42)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:L/AC:M/Au:N/C:P/I:N/A:N

refmap via4

fulldisc	20070201 umount crash and xterm (kind of) information leak!
misc	http://gotfault.wordpress.com/2007/02/01/a-funny-case/
osvdb	33651

statements via4

contributor	Mark J Cox
lastmodified	2007-02-09
organization	Red Hat
statement	Red Hat does not consider this issue to be a security vulnerability. It is correct and expected behavior for xterm not to zero-fill its scrollback buffer upon reception of terminal clear excape sequence.

Last major update

15-11-2008 - 06:42

Published

07-02-2007 - 20:28

Last modified

15-11-2008 - 06:42