It is possible that the xterm on your system does not allow logging. In this case, the vulnerability cannot be exploited. This vulnerability allows anyone with access to a user account to gain root access. Solutions All of the following solutions require that a new version of xterm be installed. When installing the new xterm, it is important either to remove the old version of xterm or to clear the setuid and setgid bits from the old xterm.
CERT suggests one of the following solutions.
Install vendor supplied patch if available. CERT is hopeful that patches will be forthcoming. The file is available via anonymous FTP from info.cert.org. A current version of this file is appended to this Advisory. Install all patch files up to and including fix-26.