CVE-2007-4074: Critical severity SUSE SuSE Linux vulnerability

Published Jul 30, 2007

Updated

The default configuration of Centre for Speech Technology Research (CSTR) Festival 1.95 beta (aka 2.0 beta) on Gentoo Linux, SUSE Linux, and possibly other distributions, is run locally with elevated privileges without requiring authentication, which allows local and remote attackers to execute arbitrary commands via the local daemon on port 1314, a different vulnerability than CVE-2001-0956. NOTE: this issue is local in some environments, but remote on others.

Affected Software

2 affected components

SUSE SuSE Linux

Centre for Speech Technology Research Gentoo Linux=festival_1.95_beta

Event History

Jul 30, 2007

CVE Published

05:30 PM

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4074?

CVE-2007-4074 is considered to have a medium severity due to the potential for local and remote attackers to execute arbitrary code.

How do I fix CVE-2007-4074?

To fix CVE-2007-4074, update the CSTR Festival package to a version that is not affected by the vulnerability.

What versions are affected by CVE-2007-4074?

CVE-2007-4074 affects the default configuration of CSTR Festival 1.95 beta on Gentoo Linux, SUSE Linux, and possibly other distributions.

Can CVE-2007-4074 be exploited remotely?

Yes, CVE-2007-4074 can be exploited remotely if the vulnerable configuration is accessible.

What are the potential impacts of CVE-2007-4074?

The impact of CVE-2007-4074 includes unauthorized execution of arbitrary code, potentially compromising the system's integrity.