CVE-2008-0162

UNKNOWN

misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges

Published Feb 22, 2008

Modified 2 years ago

Details

misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges.

References

CVSS Analysis

CVSS v2.0

7.2

Exploitability

Access Vector

LocalAV:L

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

CompleteC:C

Integrity

CompleteI:C

Availability

CompleteA:C

7.2/AV:L/AC:L/Au:N/C:C/I:C/A:C

Ecosystems

Timeline

PublishedFeb 22, 2008

ModifiedAug 7, 2024