CVE-2008-0162: High severity debian linux vulnerability

Q: What is the severity of CVE-2008-0162?

CVE-2008-0162 is considered a privilege escalation vulnerability that allows local users to gain elevated privileges.

Q: How do I fix CVE-2008-0162?

To mitigate CVE-2008-0162, upgrade to splitvt version 1.6.7 or later where the privilege dropping issue is resolved.

Q: Which versions of splitvt are affected by CVE-2008-0162?

CVE-2008-0162 affects splitvt versions up to and including 1.6.6.

Q: Can CVE-2008-0162 be exploited remotely?

CVE-2008-0162 is a local vulnerability and cannot be exploited remotely.

Q: What systems are primarily impacted by CVE-2008-0162?

CVE-2008-0162 primarily impacts Debian GNU/Linux systems running splitvt versions prior to 1.6.7.

Published Feb 22, 2008

Updated

misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges.

Affected Software

14 affected components

Debian Debian Linux=4.0

Sam Lantinga Splitvt<=1.6.6

Remediation

Patch Available

http://www.debian.org/security/2008/dsa-1500

Event History

Feb 22, 2008

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Data Sourced

09:44 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-0162?

CVE-2008-0162 is considered a privilege escalation vulnerability that allows local users to gain elevated privileges.

How do I fix CVE-2008-0162?