Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-1573
HistoryMay 06, 2009 - 12:00 a.m.

CVE-2009-1573

2009-05-0600:00:00
ubuntu.com
ubuntu.com
10

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0

Percentile

5.1%

xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other
operating systems place the magic cookie (MCOOKIE) on the command line,
which allows local users to gain privileges by listing the process and its
arguments.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchxorg-server< 2:1.4.1~git20080131-1ubuntu9.3UNKNOWN
ubuntu9.04noarchxorg-server< 2:1.6.0-0ubuntu14.2UNKNOWN

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0

Percentile

5.1%