Approved changes feed: RSS · Atom

cpe:2.3:a:rxvt-unicode:rxvt-unicode:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRxvt Unicode (ce8f9f67-9a1c-55de-8803-a7f05dd97d76)
ProductRxvt Unicode (ba6cbb40-6283-5833-adb1-17a47f6f8ac6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/rxvt-unicode purl2cpe 2026-06-01 10:11:16.449895
pkg:deb/ubuntu/rxvt-unicode purl2cpe 2026-06-01 10:11:16.449897
pkg:github/exg/rxvt-unicode purl2cpe 2026-06-01 10:11:16.449898
pkg:rpm/opensuse/rxvt-unicode purl2cpe 2026-06-01 10:11:16.449900

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1142 vulnerable 2026-06-08 04:50:18.992396 Details available
rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.
Published: 2008-04-07T17:00:00.000Z
Updated: 2024-08-07T08:08:57.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0126 vulnerable 2026-06-08 04:48:46.000984 Details available
rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices.
Published: 2006-01-09T11:00:00.000Z
Updated: 2024-08-07T16:25:33.396Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.