CVEvulnerability
CVE-2009-1573
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-05-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by listing the process and its arguments.
Affected configurations
• debian debian linux
• redhat fedora 10
• ubuntu linux
• branden robinson xvfb-run 1.6.1
Related
Weakness · not in database (1)
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526678 Exploit, Vendor Advisory
- http://secunia.com/advisories/39834 secunia.com
- http://www.openwall.com/lists/oss-security/2009/05/05/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2009/05/05/4 www.openwall.com
- http://www.securityfocus.com/bid/34828 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-939-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2010/1185 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50348 exchange.xforce.ibmcloud.com
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526678 Exploit, Vendor Advisory
- http://secunia.com/advisories/39834 secunia.com
- http://www.openwall.com/lists/oss-security/2009/05/05/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2009/05/05/4 www.openwall.com
- http://www.securityfocus.com/bid/34828 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-939-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2010/1185 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50348 exchange.xforce.ibmcloud.com