Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files.
References
Configurations
History
20 Nov 2024, 23:54
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/14300 - | |
References | () http://securitytracker.com/id?1013206 - | |
References | () http://www.debian.org/security/2005/dsa-681 - Patch, Vendor Advisory | |
References | () http://www.securityfocus.com/bid/12546 - |
Information
Published : 2005-05-02 04:00
Updated : 2024-11-20 23:54
NVD link : CVE-2005-0070
Mitre link : CVE-2005-0070
CVE.ORG link : CVE-2005-0070
JSON object : View
Products Affected
synaesthesia
- synaesthesia
CWE