rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10222-1 advisory.

  - rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow     local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-     aterm, and wterm are also affected. NOTE: realistic attack scenarios require that the victim enters a     command on the wrong machine. (CVE-2008-1142)

  - rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution     because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline.
    (CVE-2021-33477)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It was possible to open a terminal on :0 when the environment variable was not set. This could be exploited by local users to hijack X11 connections (CVE-2008-1142).

A vulnerability in rxvt allowed it to open a terminal on :0 if the environment variable was not set, which could be used by a local user to hijack X11 connections (CVE-2008-1142).

The updated packages have been patched to correct this issue.

The remote host is affected by the vulnerability described in GLSA-200805-03 (Multiple X11 terminals: Local privilege escalation)

    Bernhard R. Link discovered that RXVT opens a terminal on :0 if the     '-display' option is not specified and the DISPLAY environment variable     is not set. Further research by the Gentoo Security Team has shown that     aterm, Eterm, Mrxvt, multi-aterm, rxvt-unicode, and wterm are also     affected.
  Impact :

    A local attacker could exploit this vulnerability to hijack X11     terminals of other users.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
168336	openSUSE 15 Security Update : rxvt-unicode (openSUSE-SU-2022:10222-1)	Nessus	SuSE Local Security Checks	high
40125	openSUSE Security Update : rxvt-unicode (rxvt-unicode-163)	Nessus	SuSE Local Security Checks	low
36624	Mandriva Linux Security Advisory : rxvt (MDVSA-2008:161)	Nessus	Mandriva Local Security Checks	low
34042	openSUSE 10 Security Update : rxvt-unicode (rxvt-unicode-5541)	Nessus	SuSE Local Security Checks	low
32151	GLSA-200805-03 : Multiple X11 terminals: Local privilege escalation	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2008-1142

critical

Tenable Plugins

high

low

low

low

medium