CVE

Id
39008  
CVE No.
CVE-2009-1573  
Status
Candidate  
Description
xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by listing the process and its arguments.  
Phase
Assigned (20090506)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
428310 39008 CVE-2009-1573 MLIST:[oss-security] 20090505 CVE id request: Debian/Ubuntu specific issue in xvfb-run (xorg)  View
428311 39008 CVE-2009-1573 URL:http://www.openwall.com/lists/oss-security/2009/05/05/2  View
428312 39008 CVE-2009-1573 MLIST:[oss-security] 20090505 Re: CVE id request: Debian/Ubuntu specific issue in xvfb-run (xorg)  View
428313 39008 CVE-2009-1573 URL:http://www.openwall.com/lists/oss-security/2009/05/05/4  View
428314 39008 CVE-2009-1573 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526678  View
428315 39008 CVE-2009-1573 UBUNTU:USN-939-1  View
428316 39008 CVE-2009-1573 URL:http://www.ubuntu.com/usn/USN-939-1  View
428317 39008 CVE-2009-1573 BID:34828  View
428318 39008 CVE-2009-1573 URL:http://www.securityfocus.com/bid/34828  View
428319 39008 CVE-2009-1573 SECUNIA:39834  View
428320 39008 CVE-2009-1573 URL:http://secunia.com/advisories/39834  View
428321 39008 CVE-2009-1573 VUPEN:ADV-2010-1185  View
428322 39008 CVE-2009-1573 URL:http://www.vupen.com/english/advisories/2010/1185  View
428323 39008 CVE-2009-1573 XF:xvfbrun-magiccookie-info-disclosure(50348)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40830 JVNDB-2009-001836 Cscope の putstring 関数におけるスタックベースのバッファオーバーフローの脆弱性 Cscope の putstring 関数には、ソースコード内の長大な関数名および symbol の処理に不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-1577 39008 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001836.html  View