CVE-1999-0965
MediumExploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Race condition in xterm allows local users to modify arbitrary files via the logging option.
Risk Assessment
This vulnerability may lead to unauthorized file modifications, posing a risk to system integrity.
Recommendation
It is recommended to restrict access to the logging option in xterm and monitor user activities.
Other vulnerabilities in xterm
See all- CVE-2023-40359Critical
xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), leading to a pointer/overflow issue. This can only occur for xterm installations configured at compile time to use a certain experimental feature.
- CVE-1999-1210High
xterm in Digital UNIX 4.0B with patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access.
Original NVD description (English source)
Race condition in xterm allows local users to modify arbitrary files via the logging option.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS