Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

festival: privilege escalation

Package(s):

festival

CVE #(s):

Created:

July 26, 2007

Updated:

August 1, 2007

Description:

The festival text-to-speech converter has a privilege escalation vulnerability. The festival daemon runs with root privileges, a local attacker can connect to to the daemon and execute arbitrary commands as root.

Alerts:

Gentoo

200707-10

2007-07-25

(Log in to post comments)

festival: privilege escalation

Posted Aug 12, 2007 12:33 UTC (Sun) by kreutzm (guest, #4700) [Link]

Debian is not affected, as festival runs as nobody:audio