Bugtraq: Xterm security hole

[dave () elxr Jpl Nasa Gov (Dave Hayes)]

Does anyone have enough details on this hole to determine if the
entire logging mechanism *needs* to be disabled? Some of us use
Xterm logging here and I don't understand exactly what the problem
is. 
------
Dave Hayes - Institutional Network & Communications - JPL/NASA - Pasadena CA
dave () elxr jpl nasa gov       dave () jato jpl nasa gov         ...usc!elroy!dxh

    A cat and a dog were fighting. A man asked them what they were doing. 
       They said: "The winner will decide which of us is a rat." 
                 "You are both wrong," said the man. 
              So they set upon him and put him to flight.