Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

zhcon: privilege escalation

Package(s):

zhcon

CVE #(s):

CAN-2005-0072

Created:

January 24, 2005

Updated:

January 26, 2005

Description:

Erik Sjolund discovered that zhcon accesses a user-controlled configuration file with elevated privileges which could make it possible to read arbitrary files.

Alerts:

Debian	DSA-655-1	2005-01-25
Mandrake	MDKSA-2005:012	2005-01-24

(Log in to post comments)