Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

XaoS: improper setuid-root execution

Package(s):

xaos

CVE #(s):

Created:

June 9, 2003

Updated:

June 11, 2003

Description:

XaoS, a program for displaying fractal images, is installed setuid root on certain architectures in order to use svgalib, which requires access to the video hardware. However, it is not designed for secure setuid execution, and can be exploited to gain root privileges.

Alerts:

Debian

DSA-310-1

2003-06-08

(Log in to post comments)