CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1142

rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 20.4%

CVSS Severity

CVSS v2 Score 3.7

References

Products affected by CVE-2008-1142

Aterm » Aterm » Version: Any

cpe:2.3:a:aterm:aterm:*
Aterm » Aterm » Version: 0.1.0

cpe:2.3:a:aterm:aterm:0.1.0
Aterm » Aterm » Version: 0.1.1

cpe:2.3:a:aterm:aterm:0.1.1
Aterm » Aterm » Version: 0.2.0

cpe:2.3:a:aterm:aterm:0.2.0
Aterm » Aterm » Version: 0.3.0

cpe:2.3:a:aterm:aterm:0.3.0
Aterm » Aterm » Version: 0.3.1

cpe:2.3:a:aterm:aterm:0.3.1
Aterm » Aterm » Version: 0.3.2

cpe:2.3:a:aterm:aterm:0.3.2
Aterm » Aterm » Version: 0.3.3

cpe:2.3:a:aterm:aterm:0.3.3
Aterm » Aterm » Version: 0.3.4

cpe:2.3:a:aterm:aterm:0.3.4
Aterm » Aterm » Version: 0.3.5

cpe:2.3:a:aterm:aterm:0.3.5
Aterm » Aterm » Version: 0.3.6

cpe:2.3:a:aterm:aterm:0.3.6
Aterm » Aterm » Version: 0.4.0

cpe:2.3:a:aterm:aterm:0.4.0
Aterm » Aterm » Version: 0.4.1

cpe:2.3:a:aterm:aterm:0.4.1
Aterm » Aterm » Version: 0.4.2

cpe:2.3:a:aterm:aterm:0.4.2
Aterm » Aterm » Version: 1.00

cpe:2.3:a:aterm:aterm:1.00
Eterm » Eterm » Version: Any

cpe:2.3:a:eterm:eterm:*
Eterm » Eterm » Version: 0.9.2

cpe:2.3:a:eterm:eterm:0.9.2
Mrxvt » Mrxvt » Version: Any

cpe:2.3:a:mrxvt:mrxvt:*
Mrxvt » Mrxvt » Version: 0.4.2

cpe:2.3:a:mrxvt:mrxvt:0.4.2
Multi-Aterm » Multi-Aterm » Version: Any

cpe:2.3:a:multi-aterm:multi-aterm:*
Multi-Aterm » Multi-Aterm » Version: 0.0.1

cpe:2.3:a:multi-aterm:multi-aterm:0.0.1
Multi-Aterm » Multi-Aterm » Version: 0.0.3

cpe:2.3:a:multi-aterm:multi-aterm:0.0.3
Multi-Aterm » Multi-Aterm » Version: 0.0.4

cpe:2.3:a:multi-aterm:multi-aterm:0.0.4
Multi-Aterm » Multi-Aterm » Version: 0.0.5

cpe:2.3:a:multi-aterm:multi-aterm:0.0.5
Multi-Aterm » Multi-Aterm » Version: 0.1

cpe:2.3:a:multi-aterm:multi-aterm:0.1
Rxvt-Unicode » Rxvt-Unicode » Version: Any

cpe:2.3:a:rxvt-unicode:rxvt-unicode:*
Rxvt-Unicode » Rxvt-Unicode » Version: 1.0

cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.0
Rxvt-Unicode » Rxvt-Unicode » Version: 1.1

cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.1
Rxvt-Unicode » Rxvt-Unicode » Version: 1.2

cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.2
Rxvt-Unicode » Rxvt-Unicode » Version: 1.3

cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.3
Rxvt-Unicode » Rxvt-Unicode » Version: 1.4

cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.4
Rxvt-Unicode » Rxvt-Unicode » Version: 1.5

cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.5
Rxvt-Unicode » Rxvt-Unicode » Version: 1.6

cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.6
Rxvt-Unicode » Rxvt-Unicode » Version: 1.7

cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.7
Rxvt-Unicode » Rxvt-Unicode » Version: 1.8

cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.8
Rxvt-Unicode » Rxvt-Unicode » Version: 1.9

cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.9
Rxvt-Unicode » Rxvt-Unicode » Version: 1.91

cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.91
Rxvt-Unicode » Rxvt-Unicode » Version: 2.0

cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.0
Rxvt-Unicode » Rxvt-Unicode » Version: 2.1

cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.1
Rxvt-Unicode » Rxvt-Unicode » Version: 2.2

cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.2
Rxvt-Unicode » Rxvt-Unicode » Version: 2.3

cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.3
Rxvt-Unicode » Rxvt-Unicode » Version: 2.4

cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.4
Rxvt-Unicode » Rxvt-Unicode » Version: 2.5

cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.5
Rxvt-Unicode » Rxvt-Unicode » Version: 2.6

cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.6
Rxvt-Unicode » Rxvt-Unicode » Version: 2.7

cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.7
Rxvt-Unicode » Rxvt-Unicode » Version: 2.8

cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.8
Rxvt-Unicode » Rxvt-Unicode » Version: 2.9

cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.9
Rxvt-Unicode » Rxvt-Unicode » Version: 3.0

cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.0
Rxvt-Unicode » Rxvt-Unicode » Version: 3.1

cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.1
Rxvt-Unicode » Rxvt-Unicode » Version: 3.2

cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.2
Rxvt-Unicode » Rxvt-Unicode » Version: 3.3

cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.3
Rxvt-Unicode » Rxvt-Unicode » Version: 3.4

cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.4
Rxvt-Unicode » Rxvt-Unicode » Version: 3.5

cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.5
Rxvt-Unicode » Rxvt-Unicode » Version: 3.6

cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.6
Rxvt-Unicode » Rxvt-Unicode » Version: 3.7

cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.7
Rxvt-Unicode » Rxvt-Unicode » Version: 3.8

cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.8
Rxvt-Unicode » Rxvt-Unicode » Version: 3.9

cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.9
Rxvt-Unicode » Rxvt-Unicode » Version: 4.0

cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.0
Rxvt-Unicode » Rxvt-Unicode » Version: 4.1

cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.1
Rxvt-Unicode » Rxvt-Unicode » Version: 4.2

cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.2
Rxvt-Unicode » Rxvt-Unicode » Version: 4.3

cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.3
Rxvt-Unicode » Rxvt-Unicode » Version: 4.4

cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.4
Rxvt-Unicode » Rxvt-Unicode » Version: 4.5

cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.5
Rxvt-Unicode » Rxvt-Unicode » Version: 4.6

cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.6
Rxvt-Unicode » Rxvt-Unicode » Version: 4.7

cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.7
Rxvt-Unicode » Rxvt-Unicode » Version: 4.8

cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.8
Rxvt-Unicode » Rxvt-Unicode » Version: 4.9

cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.9
Rxvt-Unicode » Rxvt-Unicode » Version: 5.0

cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.0
Rxvt-Unicode » Rxvt-Unicode » Version: 5.1

cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.1
Rxvt-Unicode » Rxvt-Unicode » Version: 5.2

cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.2
Rxvt-Unicode » Rxvt-Unicode » Version: 5.3

cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.3
Rxvt-Unicode » Rxvt-Unicode » Version: 5.4

cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.4
Rxvt-Unicode » Rxvt-Unicode » Version: 5.5

cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.5
Rxvt-Unicode » Rxvt-Unicode » Version: 5.6

cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.6
Rxvt-Unicode » Rxvt-Unicode » Version: 5.7

cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.7
Rxvt-Unicode » Rxvt-Unicode » Version: 5.8

cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.8
Rxvt-Unicode » Rxvt-Unicode » Version: 5.9

cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.9
Rxvt-Unicode » Rxvt-Unicode » Version: 6.0

cpe:2.3:a:rxvt-unicode:rxvt-unicode:6.0
Rxvt-Unicode » Rxvt-Unicode » Version: 6.1

cpe:2.3:a:rxvt-unicode:rxvt-unicode:6.1
Rxvt-Unicode » Rxvt-Unicode » Version: 6.2

cpe:2.3:a:rxvt-unicode:rxvt-unicode:6.2
Rxvt-Unicode » Rxvt-Unicode » Version: 6.3

cpe:2.3:a:rxvt-unicode:rxvt-unicode:6.3
Rxvt-Unicode » Rxvt-Unicode » Version: 7.0

cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.0
Rxvt-Unicode » Rxvt-Unicode » Version: 7.1

cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.1
Rxvt-Unicode » Rxvt-Unicode » Version: 7.2

cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.2
Rxvt-Unicode » Rxvt-Unicode » Version: 7.3

cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.3
Rxvt-Unicode » Rxvt-Unicode » Version: 7.4

cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.4
Rxvt-Unicode » Rxvt-Unicode » Version: 7.5

cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.5
Rxvt-Unicode » Rxvt-Unicode » Version: 7.6

cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.6
Rxvt-Unicode » Rxvt-Unicode » Version: 7.7

cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.7
Rxvt-Unicode » Rxvt-Unicode » Version: 7.8

cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.8
Rxvt-Unicode » Rxvt-Unicode » Version: 7.9

cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.9
Rxvt-Unicode » Rxvt-Unicode » Version: 8.0

cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.0
Rxvt-Unicode » Rxvt-Unicode » Version: 8.1

cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.1
Rxvt-Unicode » Rxvt-Unicode » Version: 8.2

cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.2
Rxvt-Unicode » Rxvt-Unicode » Version: 8.3

cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.3
Rxvt-Unicode » Rxvt-Unicode » Version: 8.4

cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.4
Rxvt-Unicode » Rxvt-Unicode » Version: 8.5

cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.5
Rxvt-Unicode » Rxvt-Unicode » Version: 8.5a

cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.5a
Rxvt-Unicode » Rxvt-Unicode » Version: 8.6

cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.6
Rxvt-Unicode » Rxvt-Unicode » Version: 8.7

cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.7
Rxvt-Unicode » Rxvt-Unicode » Version: 8.8

cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.8
Rxvt-Unicode » Rxvt-Unicode » Version: 8.9

cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.9
Rxvt-Unicode » Rxvt-Unicode » Version: 9.0

cpe:2.3:a:rxvt-unicode:rxvt-unicode:9.0
Rxvt » Rxvt » Version: Any

cpe:2.3:a:rxvt:rxvt:*
Rxvt » Rxvt » Version: 2.6.1

cpe:2.3:a:rxvt:rxvt:2.6.1
Rxvt » Rxvt » Version: 2.6.2

cpe:2.3:a:rxvt:rxvt:2.6.2
Rxvt » Rxvt » Version: 2.6.3

cpe:2.3:a:rxvt:rxvt:2.6.3
Rxvt » Rxvt » Version: 2.6.4

cpe:2.3:a:rxvt:rxvt:2.6.4
Rxvt » Rxvt » Version: 2.7.5

cpe:2.3:a:rxvt:rxvt:2.7.5
Rxvt » Rxvt » Version: 2.7.6

cpe:2.3:a:rxvt:rxvt:2.7.6
Rxvt » Rxvt » Version: 2.7.7

cpe:2.3:a:rxvt:rxvt:2.7.7
Rxvt » Rxvt » Version: 2.7.8

cpe:2.3:a:rxvt:rxvt:2.7.8
Wterm » Wterm » Version: Any

cpe:2.3:a:wterm:wterm:*
Wterm » Wterm » Version: 6.2.5

cpe:2.3:a:wterm:wterm:6.2.5
Wterm » Wterm » Version: 6.2.6

cpe:2.3:a:wterm:wterm:6.2.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1142

Products

Pricing

Contact Us