CVE-2008-1142: aterm
CVSS: 3.7v2.0LowModified
Published 07-04-2008Last modified 07-08-2024
Vulnerability summary
CVE-2008-1142 is a low (CVSS 3.7) vulnerability in aterm. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 28.5% of scored vulnerabilities.
CVSS score
3.7/10
010
Low · v2.0 (NVD)EPSS score
0.36%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 2 · Related 2Timeline
- 07-04-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.
CVSS metrics
1 score · 1 source · 1 versionLow 3.7Preferred score · NVD (NIST)
AV:L/AC:H/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
0.36%
Chance of exploitation in the next 30 days
Percentile
29%
Versus all other CVEs
30-day change
0.00 pp
From 0.36% on 18-09-2026
18-09-202618-10-2026
EPSS score0.36%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Aterm1 product
- aterm≤ 1.0.0 | 0.1.0 | 0.1.1 | 0.2.0 | 0.3.0 | 0.3.1 | 0.3.2 | 0.3.3 | 0.3.4 | 0.3.5 | 0.3.6 | 0.4.0 | 0.4.1 | 0.42 | 1.00:beta1 | 1.00:beta2 | 1.00:beta3 | 1.00:beta4
Eterm1 product
- eterm≤ 0.9.3 | 0.9.2
Mrxvt1 product
- mrxvt≤ 0.5.2 | 0.4.2
Multi-aterm1 product
- multi-aterm≤ 0.2 | 0.0.1 | 0.0.3 | 0.0.4 | 0.0.5 | 0.1
Rxvt1 product
- rxvt≤ 2.7.9 | 2.6.1 | 2.6.2 | 2.6.3 | 2.6.4 | 2.7.5 | 2.7.6 | 2.7.7 | 2.7.8
Rxvt-unicode1 product
- rxvt-unicode≤ 9.01 | 1.0 | 1.1 | 1.2 | 1.3 | 1.4 | 1.5 | 1.6 | 1.7 | 1.8 | 1.9 | 1.91 | 2.0 | 2.1 | 2.2 | 2.3 | 2.4 | 2.5 | 2.6 | 2.7 | 2.8 | 2.9 | 3.0 | 3.1 | 3.2 | 3.3 | 3.4 | 3.5 | 3.6 | 3.7 | 3.8 | 3.9 | 4.0 | 4.1 | 4.2 | 4.3 | 4.4 | 4.5 | 4.6 | 4.7 | 4.8 | 4.9 | 5.0 | 5.1 | 5.2 | 5.3 | 5.4 | 5.5 | 5.6 | 5.7 | 5.8 | 5.9 | 6.0 | 6.1 | 6.2 | 6.3 | 7.0 | 7.1 | 7.2 | 7.3 | 7.4 | 7.5 | 7.6 | 7.7 | 7.8 | 7.9 | 8.0 | 8.1 | 8.2 | 8.3 | 8.4 | 8.5 | 8.5a | 8.6 | 8.7 | 8.8 | 8.9 | 9.0
Wterm1 product
- wterm≤ 6.2.8a2 | 6.2.5 | 6.2.6
7 vendors · 7 products
References
14 links- article.gmane.org/gmane.comp.security.oss.general/122X Refsource MISC