Vyatta – Linux & Open Source Alternative to Cisco – Advanced Routing, Firewall, VPN, QoS..
Free Download ->

LK2008: The values of the Linux community

LWN.net Weekly Edition for October 9, 2008

LWN.net Weekly Edition for October 2, 2008

Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

festival: privilege escalation

Package(s):

festival

CVE #(s):

Created:

July 26, 2007

Updated:

August 1, 2007

Description:

The festival text-to-speech converter has a privilege escalation vulnerability. The festival daemon runs with root privileges, a local attacker can connect to to the daemon and execute arbitrary commands as root.

Alerts:

Gentoo

200707-10

2007-07-25

(Log in to post comments)

festival: privilege escalation

Posted Aug 12, 2007 12:33 UTC (Sun) by kreutzm (subscriber, #4700) [Link]

Debian is not affected, as festival runs as nobody:audio