Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

splitvt: privilege escalation

Package(s):

splitvt

CVE #(s):

CVE-2008-0162

Created:

February 22, 2008

Updated:

March 4, 2008

Description:

From the Debian advisory: Mike Ashton discovered that splitvt, a utility to run two programs in a split screen, did not drop group privileges prior to executing 'xprop'. This could allow any local user to gain the privileges of group utmp.

Alerts:

Gentoo	200803-05	2008-03-03
Debian	DSA-1500-1	2008-02-21

(Log in to post comments)