CVE-2004-0151

CVE-2004-0151 affects xitalk, with the vulnerability in 1.1.11 and earlier allowing a local user to execute arbitrary commands under the utmp GID. Debian’s DSA-462-1 fixes this by updating xitalk to 1.1.11-9.1woody1 for woody (and related notices for unstable). The issue is a local privilege-rele...

[SECURITY] [DSA 462-1] New xitalk packages fix local group utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 462-1 [email protected] http://www.debian.org/security/ Martin Schulze March 12th, 2004 http://www.debian.org/security/faq -...