Lucene search

K
nvd[email protected]NVD:CVE-2007-0823
HistoryFeb 07, 2007 - 8:28 p.m.

CVE-2007-0823

2007-02-0720:28:00
web.nvd.nist.gov
3

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

AI Score

6

Confidence

Low

EPSS

0

Percentile

5.1%

xterm on Slackware Linux 10.2 stores information that had been displayed for a different user account using the same xterm process, which might allow local users to bypass file permissions and read other users’ files, or obtain other sensitive information, by reading the xterm process memory. NOTE: it could be argued that this is an expected consequence of multiple users sharing the same interactive process, in which case this is not a vulnerability.

Affected configurations

Nvd
Node
slackwareslackware_linuxMatch10.2
VendorProductVersionCPE
slackwareslackware_linux10.2cpe:2.3:o:slackware:slackware_linux:10.2:*:*:*:*:*:*:*

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

AI Score

6

Confidence

Low

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2007-0823