gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Libvte4 | Gnome | * | * |
Libzvt2 | Gnome | 1.4.2.19 (including) | 1.4.2.19 (including) |