Lucene search
HistoryJun 02, 2008 - 9:30 p.m.
CVE-2008-2359
cve-2008-2359
system-config-network
consolehelper
privilege escalation
fedora 8
nvd
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration.
Affected configurations
Node
fedora_8consolehelperMatch1.4.4
ORfedora_8consolehelperMatch1.4.5
ORfedora_8consolehelperMatch1.4.6
ORfedora_8consolehelperMatch1.4.7
ORfedora_8consolehelperMatch1.5.0
ORfedora_8consolehelperMatch1.5.1
ORfedora_8consolehelperMatch1.5.2
ORfedora_8consolehelperMatch1.5.3
ORfedora_8consolehelperMatch1.5.4
ORfedora_8consolehelperMatch1.5.5
ORfedora_8consolehelperMatch1.5.6
ORfedora_8consolehelperMatch1.5.7
ORfedora_8consolehelperMatch1.5.8
ORfedora_8consolehelperMatch1.5.9
ORfedora_8consolehelperMatch1.5.10
ORredhatfedora_8Match1.4.4
ORredhatfedora_8Match1.4.5
ORredhatfedora_8Match1.4.6
ORredhatfedora_8Match1.4.7
ORredhatfedora_8Match1.5.
ORredhatfedora_8Match1.5.0
ORredhatfedora_8Match1.5.1
ORredhatfedora_8Match1.5.2
ORredhatfedora_8Match1.5.3
ORredhatfedora_8Match1.5.4
ORredhatfedora_8Match1.5.5
ORredhatfedora_8Match1.5.6
ORredhatfedora_8Match1.5.7
ORredhatfedora_8Match1.5.8
ORredhatfedora_8Match1.5.9
ORredhatfedora_8Match1.5.10
Related
prion
prion
Default configuration
2008-06-02 21:30:00
nvd
nvd
CVE-2008-2359
2008-06-02 21:30:00
openvas
openvas
Fedora Update for system-config-network FEDORA-2008-4633
2009-02-17 00:00:00
Fedora Update for system-config-network FEDORA-2008-4633
2009-02-17 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: system-config-network-1.5.10-1.fc8
2008-05-29 02:52:18
cvelist
cvelist
CVE-2008-2359
2008-06-02 14:00:00
redhatcve
redhatcve
CVE-2008-2359
2019-10-04 19:58:03
nessus
nessus
Fedora 8 : system-config-network-1.5.10-1.fc8 (2008-4633)
2008-05-29 00:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2008-2359