Debian DSA-092-1 : wmtv - local root exploit

Nicolas Boullis found a nasty security problem in the wmtv a dockable video4linux TV player for windowmaker package as distributed in Debian GNU/Linux 2.2. wmtv can optionally run a command if you double-click on the TV window. This command can be specified using the -e command line option...

CVE-2001-1272

CVE-2001-1272 affects wmtv 0.6.5 and earlier, where a setuid root binary can execute arbitrary commands via the -e option due to improper privilege dropping. Public references document Debian DSA-092-1 and OpenVAS/Nessus checks, indicating a local root flaw in wmtv for Debian GNU/Linux. The vulne...

CVE-2001-1272

wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e external command option...