Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2005-0023 — Libzvt2 vulnerability

6 documents6 sources
Severity
2.1LOWNVD
EPSS
0.2%
top 52.51%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Gnome Libzvt2Debian VTE
Timeline
PublishedOct 5
Latest updateMay 1

Description

gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed.

CVSS vector

AV:L/AC:L/C:N/I:P/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages2 packages

▶NVDgnome/libzvt21.4.2.19
▶debiandebian/vte

🔴Vulnerability Details

2
GHSA
GHSA-gp2g-7h42-c9p9: gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable↗2022-05-01
▶
OSV
CVE-2005-0023: gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable↗2005-10-05
▶

💥Exploits & PoCs

1
Exploit-DB
Gnome-PTY-Helper UTMP - Hostname Spoofing↗2005-10-03
▶

📋Vendor Advisories

1
Debian
CVE-2005-0023: vte - gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the lo...↗2005
▶

💬Community

1
Bugzilla
CVE-2005-0023 gnome-pty-helper utmp/wtmp record spoofing↗2005-09-30
▶