Approved changes feed: RSS · Atom

cpe:2.3:a:rxvt:rxvt:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRxvt (7f8cc9d2-0766-5bbb-9f18-cbe8263a9737)
ProductRxvt (b3a7e73e-27ca-52c9-8f8d-f1a9dbe1ab43)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1142 vulnerable 2026-06-08 04:50:18.985978 Details available
rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.
Published: 2008-04-07T17:00:00.000Z
Updated: 2024-08-07T08:08:57.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-1186 vulnerable 2026-06-08 04:44:58.230884 Details available
rxvt, when compiled with the PRINT_PIPE option in various Linux operating systems including Linux Slackware 3.0 and RedHat 2.1, allows local users to gain root privileges by specifying a malicious program using the -print-pipe command line parameter.
Published: 2001-09-12T04:00:00.000Z
Updated: 2024-08-01T17:02:53.866Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.