Published: 05/10/2005 Updated: 11/07/2017

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 215

Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnome libvte4
gnome libzvt2 1.4.2.19

source: wwwsecurityfocuscom/bid/15004/info 'gnome-pty-helper' is susceptible to a local UTMP hostname spoofing vulnerability This issue is due to the failure of the application to properly validate user-supplied data prior to using it to update UTMP records This vulnerability allows users to spoof remote hostname information in UTMP re ...

NVD-CWE-Other http://bugzilla.gnome.org/show_bug.cgi?id=317312 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330907 http://www.securityfocus.com/bid/15004 http://secunia.com/advisories/17023 http://www.vupen.com/english/advisories/2005/1931 http://marc.info/?l=bugtraq&m=112879572407250&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/22496 https://nvd.nist.gov https://www.exploit-db.com/exploits/26321/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-0023

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect