CVEvulnerability

CVE-2005-0070

7.2 HIGH Published 2005-05-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-05-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files.

Affected configurations

• synaesthesia synaesthesia (<= 2.1)

References