GLSA-200409-10 : multi-gnome-terminal: Information leak

Medium Nessus Plugin ID 14669


The remote Gentoo host is missing one or more security-related patches.


The remote host is affected by the vulnerability described in GLSA-200409-10 (multi-gnome-terminal: Information leak)

multi-gnome-terminal contains debugging code that has been known to output active keystrokes to a potentially unsafe location. Output has been seen to show up in the '.xsession-errors' file in the user's home directory. Since this file is world-readable on many machines, this bug has the potential to leak sensitive information to anyone using the system.
Impact :

Any authorized user on the local machine has the ability to read any critical data that has been entered into the terminal, including passwords.
Workaround :

There is no known workaround at this time.


All multi-gnome-terminal users should upgrade to the latest version:
# emerge sync # emerge -pv '>=x11-terms/multi-gnome-terminal-1.6.2-r1' # emerge '>=x11-terms/multi-gnome-terminal-1.6.2-r1'

See Also

Plugin Details

Severity: Medium

ID: 14669

File Name: gentoo_GLSA-200409-10.nasl

Version: $Revision: 1.14 $

Type: local

Published: 2004/09/06

Modified: 2016/10/05

Dependencies: 12634

Risk Information

Risk Factor: Medium

Vulnerability Information

CPE: p-cpe:/a:gentoo:linux:multi-gnome-terminal, cpe:/o:gentoo:linux

Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list

Patch Publication Date: 2004/09/06

Vulnerability Publication Date: 2004/09/06

Reference Information

OSVDB: 9752

GLSA: 200409-10