gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Libvte4 | Gnome | * | * |
Libzvt2 | Gnome | 1.4.2.19 (including) | 1.4.2.19 (including) |
Gnome-libs | Ubuntu | dapper | * |
Gnome-libs | Ubuntu | edgy | * |
Gnome-libs | Ubuntu | feisty | * |
Gnome-libs | Ubuntu | gutsy | * |
Gnome-libs | Ubuntu | hardy | * |
Gnome-libs | Ubuntu | intrepid | * |
Gnome-libs | Ubuntu | jaunty | * |