What’s Vulnerable › Vulnerabilities

CVE-1999-0965

Severity: medium (CVSS 6.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 1997-09-19 · updated 2026-06-16

Description

Race condition in xterm allows local users to modify arbitrary files via the logging option.

Affected products

X.Org X11: before 5.0; 5.0, 5.0-fix-01, 5.0-fix-02, 5.0-fix-03, 5.0-fix-04, 5.0-fix-05 (+20) — fixed in 5.0

How to fix

Upgrade to a fixed version: X.Org X11 5.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-1999-0965 or the next vulnerability affects your stack