Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

ppxp: missing privilege release

Package(s):

ppxp

CVE #(s):

CAN-2005-0392

Created:

May 19, 2005

Updated:

July 5, 2005

Description:

The ppxp PPP program has a log file vulnerability that can allow the root privileges used by the software to remain active, enabling the opening of a root shell by a local user.

Alerts:

Debian	DSA-725-2	2005-07-04
Debian	DSA-725-1	2005-05-19

(Log in to post comments)