CVE-2007-2797 in xterm

Summary

xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users terminals.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 05/21/2007
• Disclosure: 08/27/2007
• Moderation: VulDB entry created
• Entries: VDB-38510 (1)
• CPE: ready
• CWE: Unknown
• CVSS: 4.0
• EPSS: 0.00093
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-2797
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-2797
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-2797/