CVE-2007-0823

Name	CVE-2007-0823
Description	xterm on Slackware Linux 10.2 stores information that had been displayed for a different user account using the same xterm process, which might allow local users to bypass file permissions and read other users' files, or obtain other sensitive information, by reading the xterm process memory. NOTE: it could be argued that this is an expected consequence of multiple users sharing the same interactive process, in which case this is not a vulnerability.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
xterm (PTS)	jessie, jessie (lts)	312-2+deb8u4	fixed
	stretch (security), stretch (lts), stretch	327-2+deb9u3	fixed
	buster	344-1+deb10u2	fixed
	bullseye	366-1+deb11u1	fixed
	bookworm	379-1	fixed
	sid, trixie	395-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
xterm	source	(unstable)	(not affected)

- xterm <not-affected> (Not a security problem)