© 2026 vulntracker.io

CVE-2008-1142

N/A

Published: April 7, 2008 at 05:00 PM UTC

Updated: June 16, 2026 at 10:51 PM UTC

7 products affected across 7 vendorsRxvtAtermRxvt Unicode

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.4%

Description

rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

95%

v ≤ 1.0.00.1.0 0.1.1 0.2.0 0.3.0 0.3.1 0.3.2 0.3.3 0.3.4 0.3.5 0.3.6 0.4.0 0.4.1 0.4.2 1.00 beta1 1.00 beta2 1.00 beta3 1.00 beta4

95%

v ≤ 0.9.30.9.2

95%

v ≤ 0.5.20.4.2

Multi Aterm · Multi Aterm

95%

v ≤ 0.20.0.1 0.0.3 0.0.4 0.0.5 0.1

95%

v ≤ 2.7.92.6.1 2.6.2 2.6.3 2.6.4 2.7.5 2.7.6 2.7.7 2.7.8

Rxvt Unicode · Rxvt Unicode

95%

v ≤ 9.011.0 1.1 1.2 1.3 1.4 1.5 1.6 1.7 1.8 1.9 1.91 2.0 2.1 2.2 2.3 2.4 2.5 2.6 2.7 2.8 2.9 3.0 3.1 3.2 3.3 3.4 3.5 3.6 3.7 3.8 3.9 4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8 4.9 5.0 5.1 5.2 5.3 5.4 5.5 5.6 5.7 5.8 5.9 6.0 6.1 6.2 6.3 7.0 7.1 7.2 7.3 7.4 7.5 7.6 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 8.5 8.5a 8.6 8.7 8.8 8.9 9.0

95%

v ≤ 6.2.8a26.2.5 6.2.6

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (14)

x_refsource_MISC

Source: [email protected]

http://article.gmane.org/gmane.comp.security.oss.general/122

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469296

Vendor Advisoryx_refsource_SUSE

Source: [email protected]

http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html

Third Party Advisoryx_refsource_SECUNIAVendor Advisory

Source: [email protected]

http://secunia.com/advisories/29576

Third Party Advisoryx_refsource_SECUNIAVendor Advisory

Source: [email protected]

http://secunia.com/advisories/30224

Third Party Advisoryx_refsource_SECUNIAVendor Advisory

Source: [email protected]

http://secunia.com/advisories/30225

Third Party Advisoryx_refsource_SECUNIAVendor Advisory

Source: [email protected]

http://secunia.com/advisories/30226

Third Party Advisoryx_refsource_SECUNIAVendor Advisory

Source: [email protected]

http://secunia.com/advisories/30227

CVSS

3.7LOW[email protected]

Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-264

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card