NVD

Id
56205  
Name
CVE-2007-4074  
Description
The default configuration of Centre for Speech Technology Research (CSTR) Festival 1.95 beta (aka 2.0 beta) on Gentoo Linux, SUSE Linux, and possibly other distributions, is run locally with elevated privileges without requiring authentication, which allows local and remote attackers to execute arbitrary commands via the local daemon on port 1314, a different vulnerability than CVE-2001-0956. NOTE: this issue is local in some environments, but remote on others.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-07-30  
Modified Date
2008-09-05  
Seq
2007-4074  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286306 56205 CVE-2007-4074 http://bugs.gentoo.org/show_bug.cgi?id=170477  View
286307 56205 CVE-2007-4074 SUSE-SR:2007:021  View
286308 56205 CVE-2007-4074 GLSA-200707-10  View
286309 56205 CVE-2007-4074 20080403 Medium security hole affecting Festival on Debian unstable/testing and Ubuntu Hardy Heron  View
286310 56205 CVE-2007-4074 25069  View
286311 56205 CVE-2007-4074 gentoo-festival-privilege-escalation(35606)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53738 JVNDB-2007-002430 Gentoo Linux などの CSTR Festival のディフォルト設定における任意のコマンドを実行される脆弱性 Gentoo Linux、SUSE Linux およびその他の Linux ディストリビューション上の Centre for Speech Technology Research (CSTR) Festival のディフォルト設定は、認証を必要としない管理者特権でローカルに稼動しているため、任意のコマンドを実行される脆弱性が存在します。 CVE-2007-4074 27429 CVE-2007-4074 56205 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002430.html 2007-07-30 2012-06-26 View