Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-1573
HistoryMay 06, 2009 - 12:00 a.m.

CVE-2009-1573

2009-05-0600:00:00
ubuntu.com
ubuntu.com
6

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%

xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other
operating systems place the magic cookie (MCOOKIE) on the command line,
which allows local users to gain privileges by listing the process and its
arguments.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchxorg-server< 2:1.4.1~git20080131-1ubuntu9.3UNKNOWN
ubuntu9.04noarchxorg-server< 2:1.6.0-0ubuntu14.2UNKNOWN

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%