Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
rxvt终端X11显示任意代码执行漏洞
Vulnerability Description
rxvt(ouR eXtended Virtual Terminal)是X窗口系统的终端模拟器。 rxvt如果没有指定-display选项且缺少DISPLAY环境变量的话，就会使用:0作为X11显示，本地用户劫持X11会话，通过恶意的X服务器以运行rxvt用户的权限执行任意命令。rxvt-unicode、mrxvt、aterm、multi-aterm、wterm等终端也受影响。如果要利用这个漏洞，本地用户必须在错误的机器上输入命令。
CVSS Information
N/A
Vulnerability Type
N/A