Enlightenment Window Manager setuid root helper local elevation of privilege vulnerability

Enlightenment Window Manager is a window manager for the X Window System that can be used alone or in conjunction with desktop environments such as GNOME, KDE, etc. The setuid root helper is one of the permission management applications. A local elevation of privilege vulnerability exists in the...

CVE-2014-1845

An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment...

Design/Logic Flaw

An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment...

CVE-2014-1845

An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment...

CVE-2014-1845: Undefined Security Weakness

An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment...

PT-2018-4178

Name of the Vulnerable Software and Affected Versions Enlightenment versions prior to 0.17.6 Description The issue is related to an unspecified setuid root helper in Enlightenment that fails to properly sanitize the environment, allowing local users to gain privileges. Recommendations For version...

CVE-2017-5899: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the setuid root helper binary in S-nail later S-mailx before 14.8.16 allows local users to write to arbitrary files and consequently gain root privileges via a .. dot dot in the randstr argument...

PT-2017-16742

Name of the Vulnerable Software and Affected Versions S-nail versions prior to 14.8.16 Description A directory traversal issue exists in the setuid root helper binary, allowing local users to write to arbitrary files and gain root privileges by using a .. dot dot in the randstr argument...