CVE-2007-2797: Xterm

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals.

Affected products

• Xterm Xterm: version 192-7.el4 only; version 208-3.1 only

Published 2007-08-27. Last modified 2026-06-16.