7.2

CVE-2008-0162

misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sam Lantinga ≫ Splitvt Version <= 1.6.6
   Debian ≫ Debian Linux Version 4.0
   Debian ≫ Debian Linux Version 4.0 Edition alpha
   Debian ≫ Debian Linux Version 4.0 Edition amd64
   Debian ≫ Debian Linux Version 4.0 Edition arm
   Debian ≫ Debian Linux Version 4.0 Edition hppa
   Debian ≫ Debian Linux Version 4.0 Edition ia-32
   Debian ≫ Debian Linux Version 4.0 Edition ia-64
   Debian ≫ Debian Linux Version 4.0 Edition m68k
   Debian ≫ Debian Linux Version 4.0 Edition mips
   Debian ≫ Debian Linux Version 4.0 Edition mipsel
   Debian ≫ Debian Linux Version 4.0 Edition powerpc
   Debian ≫ Debian Linux Version 4.0 Edition s-390
   Debian ≫ Debian Linux Version 4.0 Edition sparc
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.35% 0.262
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/29064
Vendor Advisory
http://secunia.com/advisories/29080
Vendor Advisory
http://secunia.com/advisories/29190
http://security.gentoo.org/glsa/glsa-200803-05.xml
http://www.debian.org/security/2008/dsa-1500
Patch
http://www.securityfocus.com/bid/27936