E-Commerce & credit card processing - the Open Source way!

Vyatta – Linux & Open Source Alternative to Cisco – Advanced Routing, Firewall, VPN, QoS..
Free Download ->

Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

xitalk missing privilege release

Package(s):

xitalk

CVE #(s):

Created:

March 12, 2004

Updated:

March 17, 2004

Description:

The xitalk utility fails to drop privileges; this problem can be exploited by a local user to run commands under the "utmp" group ID.

Alerts:

Debian

2004-03-12

(Log in to post comments)