Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-0023. PoCs published by Paul Szabo.
AI-analyzed exploit summary This exploit demonstrates a local UTMP hostname spoofing vulnerability in gnome-pty-helper by manipulating environment variables and leveraging the helper process to write arbitrary UTMP records. It requires compilation against gnome-libs-1.4.2/zvt and uses socket pairs to communicate with the SUID gnome-pty-helper binary.
Description
gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed.
Exploits (1)
This exploit demonstrates a local UTMP hostname spoofing vulnerability in gnome-pty-helper by manipulating environment variables and leveraging the helper process to write arbitrary UTMP records. It requires compilation against gnome-libs-1.4.2/zvt and uses socket pairs to communicate with the SUID gnome-pty-helper binary.