CVE-2006-0126
rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as...
rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices.
Exploit likelihood
What each source reports
NVD Score used
rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices.
- Record
CVE-2006-0126- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices.
- Record
CVE-2006-0126- Updated
- 2026-11-02
EUVDEUVD-2006-0134 No score
rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices.
- Record
EUVD-2006-0134- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2j8h-ghpm-93v6 No score
rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as...
rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices.
- Record
GHSA-2j8h-ghpm-93v6- Updated
- 2026-11-02
OSV No score
rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices.
- Record
CVE-2006-0126- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-0126 No score
rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices.
- Record
DEBIAN-CVE-2006-0126- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rxvt-unicodeDebian:12 |
before 6.3-1 | 6.3-1 |
rxvt-unicodeDebian:13 |
before 6.3-1 | 6.3-1 |
rxvt-unicodeDebian:14 |
before 6.3-1 | 6.3-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0126 is a medium vulnerability (CVSS 4.6) in Rxvt-unicode, published January 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in rxvt-unicode 6.3-1.