7.2

CVE-2008-2359

The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fedora 8 ≫ Consolehelper Version1.4.4
Fedora 8 ≫ Consolehelper Version1.4.5
Fedora 8 ≫ Consolehelper Version1.4.6
Fedora 8 ≫ Consolehelper Version1.4.7
Fedora 8 ≫ Consolehelper Version1.5.0
Fedora 8 ≫ Consolehelper Version1.5.1
Fedora 8 ≫ Consolehelper Version1.5.2
Fedora 8 ≫ Consolehelper Version1.5.3
Fedora 8 ≫ Consolehelper Version1.5.4
Fedora 8 ≫ Consolehelper Version1.5.5
Fedora 8 ≫ Consolehelper Version1.5.6
Fedora 8 ≫ Consolehelper Version1.5.7
Fedora 8 ≫ Consolehelper Version1.5.8
Fedora 8 ≫ Consolehelper Version1.5.9
Fedora 8 ≫ Consolehelper Version1.5.10
Redhat ≫ Fedora 8 Version1.4.4
Redhat ≫ Fedora 8 Version1.4.5
Redhat ≫ Fedora 8 Version1.4.6
Redhat ≫ Fedora 8 Version1.4.7
Redhat ≫ Fedora 8 Version1.5.
Redhat ≫ Fedora 8 Version1.5.0
Redhat ≫ Fedora 8 Version1.5.1
Redhat ≫ Fedora 8 Version1.5.2
Redhat ≫ Fedora 8 Version1.5.3
Redhat ≫ Fedora 8 Version1.5.4
Redhat ≫ Fedora 8 Version1.5.5
Redhat ≫ Fedora 8 Version1.5.6
Redhat ≫ Fedora 8 Version1.5.7
Redhat ≫ Fedora 8 Version1.5.8
Redhat ≫ Fedora 8 Version1.5.9
Redhat ≫ Fedora 8 Version1.5.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.3% 0.219
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/30399
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=448557
https://exchange.xforce.ibmcloud.com/vulnerabilities/42867
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00974.html