CVE:CVE-2008-1142
CNNVD:CNNVD-200804-082
rxvt(ouR eXtended Virtual Terminal)是X窗口系统的终端模拟器。 
rxvt如果没有指定-display选项且缺少DISPLAY环境变量的话，就会使用:0作为X11显示，本地用户劫持X11会话，通过恶意的X服务器以运行rxvt用户的权限执行任意命令。rxvt-unicode、mrxvt、aterm、multi-aterm、wterm等终端也受影响。如果要利用这个漏洞，本地用户必须在错误的机器上输入命令。
solution:Upgrade aterm aterm to a higher version than 1.0.0,0.1.0,0.1.1,0.2.0,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.3.6,0.4.0,0.4.1,0.4.2,1.00:beta1,1.00:beta2,1.00:beta3,1.00:beta4,and avoid the version (,1.0.0],0.1.0,0.1.1,0.2.0,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.3.6,0.4.0,0.4.1,0.4.2,1.00:beta1,1.00:beta2,1.00:beta3,1.00:beta4; Upgrade eterm eterm to a higher version than 0.9.3,0.9.2,and avoid the version (,0.9.3],0.9.2; Upgrade mrxvt mrxvt to a higher version than 0.5.2,0.4.2,and avoid the version (,0.5.2],0.4.2; Upgrade multi-aterm multi-aterm to a higher version than 0.2,0.0.1,0.0.3,0.0.4,0.0.5,0.1,and avoid the version (,0.2],0.0.1,0.0.3,0.0.4,0.0.5,0.1; Upgrade rxvt rxvt to a higher version than 2.7.9,2.6.1,2.6.2,2.6.3,2.6.4,2.7.5,2.7.6,2.7.7,2.7.8,and avoid the version (,2.7.9],2.6.1,2.6.2,2.6.3,2.6.4,2.7.5,2.7.6,2.7.7,2.7.8; Upgrade rxvt-unicode rxvt-unicode to a higher version than 9.01,1.0,1.1,1.2,1.3,1.4,1.5,1.6,1.7,1.8,1.9,1.91,2.0,2.1,2.2,2.3,2.4,2.5,2.6,2.7,2.8,2.9,3.0,3.1,3.2,3.3,3.4,3.5,3.6,3.7,3.8,3.9,4.0,4.1,4.2,4.3,4.4,4.5,4.6,4.7,4.8,4.9,5.0,5.1,5.2,5.3,5.4,5.5,5.6,5.7,5.8,5.9,6.0,6.1,6.2,6.3,7.0,7.1,7.2,7.3,7.4,7.5,7.6,7.7,7.8,7.9,8.0,8.1,8.2,8.3,8.4,8.5,8.5a,8.6,8.7,8.8,8.9,9.0,and avoid the version (,9.01],1.0,1.1,1.2,1.3,1.4,1.5,1.6,1.7,1.8,1.9,1.91,2.0,2.1,2.2,2.3,2.4,2.5,2.6,2.7,2.8,2.9,3.0,3.1,3.2,3.3,3.4,3.5,3.6,3.7,3.8,3.9,4.0,4.1,4.2,4.3,4.4,4.5,4.6,4.7,4.8,4.9,5.0,5.1,5.2,5.3,5.4,5.5,5.6,5.7,5.8,5.9,6.0,6.1,6.2,6.3,7.0,7.1,7.2,7.3,7.4,7.5,7.6,7.7,7.8,7.9,8.0,8.1,8.2,8.3,8.4,8.5,8.5a,8.6,8.7,8.8,8.9,9.0; Upgrade wterm wterm to a higher version than 6.2.8a2,6.2.5,6.2.6,and avoid the version (,6.2.8a2],6.2.5,6.2.6