Description
XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with insecure world-writable permissions, which allows local users to write to the Xterm of another user.
References
- macosx-xterm-information-disclosure(48727) vdb-entry
- 33798 vdb-entry
- 33937 third-party-advisory
- http://support.apple.com/kb/HT3438
- APPLE-SA-2009-02-12 vendor-advisory
- ADV-2009-0422 vdb-entry
- 1021729 vdb-entry