Debian Security Advisory DSA 405-1 (xsok)

The remote host is missing an update to xsok announced via advisory DSA 405-1. OpenVAS Vulnerability Test $Id: deb4051.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 405-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2003-0949

xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands...

CVE-2003-0949

...

CVE-2003-0949

xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands...

CVE-2003-0949

xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands...

CVE-2003-0949

CVE-2003-0949 affects xsok 1.02, where the process fails to drop privileges before locating/execing the gunzip program. This enables local users to run arbitrary commands with the privileges of the vulnerable process. Public records corroborate an in-OS privilege issue in xsok and in related Debi...

CVE-2003-0949

xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands...