CVE

Id
26154  
CVE No.
CVE-2007-2797  
Status
Candidate  
Description
xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users" terminals.  
Phase
Assigned (20070521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
263517 26154 CVE-2007-2797 BUGTRAQ:20070823 rPSA-2007-0169-1 xterm  View
263518 26154 CVE-2007-2797 URL:http://www.securityfocus.com/archive/1/archive/1/477469/100/0/threaded  View
263519 26154 CVE-2007-2797 BUGTRAQ:20070823 FLEA-2007-0048-1 xterm  View
263520 26154 CVE-2007-2797 URL:http://www.securityfocus.com/archive/1/archive/1/477632/100/100/threaded  View
263521 26154 CVE-2007-2797 MISC:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349924  View
263522 26154 CVE-2007-2797 CONFIRM:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=239070  View
263523 26154 CVE-2007-2797 CONFIRM:https://issues.rpath.com/browse/RPL-1396  View
263524 26154 CVE-2007-2797 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2007-490.htm  View
263525 26154 CVE-2007-2797 REDHAT:RHSA-2007:0701  View
263526 26154 CVE-2007-2797 URL:http://www.redhat.com/support/errata/RHSA-2007-0701.html  View
263527 26154 CVE-2007-2797 BID:26710  View
263528 26154 CVE-2007-2797 URL:http://www.securityfocus.com/bid/26710  View
263529 26154 CVE-2007-2797 OVAL:oval:org.mitre.oval:def:10421  View
263530 26154 CVE-2007-2797 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10421  View
263531 26154 CVE-2007-2797 SECUNIA:26562  View
263532 26154 CVE-2007-2797 URL:http://secunia.com/advisories/26562  View
263533 26154 CVE-2007-2797 SECUNIA:27617  View
263534 26154 CVE-2007-2797 URL:http://secunia.com/advisories/27617  View
263535 26154 CVE-2007-2797 SECUNIA:27921  View
263536 26154 CVE-2007-2797 URL:http://secunia.com/advisories/27921  View
263537 26154 CVE-2007-2797 SREASON:3066  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51747 JVNDB-2007-000410 file プログラムにおける整数オーバーフローの脆弱性 file プログラムには、過剰に大きいサイズのファイルを扱う場合 assert() 関数を迂回し、整数オーバーフローの攻撃を受ける脆弱性が存在します。なお、本脆弱性は JVNDB-2007-000235 (CVE-2007-1536) を修正するパッチに起因します。 CVE-2007-2799 26154 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000410.html  View