What’s Vulnerable › Vulnerabilities

CVE-2006-0126

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-01-09 · updated 2026-06-16

Description

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices.

Affected products

• Rxvt-Unicode: through 6.2

References

• http://dist.schmorp.de/rxvt-unicode/Changes
• http://secunia.com/advisories/18301
• http://www.osvdb.org/22223
• http://www.vupen.com/english/advisories/2006/0052
• http://dist.schmorp.de/rxvt-unicode/Changes
• http://secunia.com/advisories/18301
• http://www.osvdb.org/22223
• http://www.vupen.com/english/advisories/2006/0052

Get alerted when CVE-2006-0126 or the next vulnerability affects your stack