{"action":"Upgrade rxvt-unicode to 6.3-1 or later.","affected":[{"fixed":"6.3-1","introduced":"0"}],"component":"rxvt-unicode","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["6.3-1"],"id":"tcs_01M5N8HQ03PRP8BV3V7F4VK5ER","modified_at":"2026-10-22T23:47:33.046879023Z","published_at":"2006-01-09T11:03:00Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2006-0126","https://security-tracker.debian.org/tracker/CVE-2006-0126"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2006-0126#Debian:13/rxvt-unicode","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2006-0126"}],"summary":"rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows lo"}