NVD

Id
8  
Name
CVE-2008-0008  
Description
The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresuid, (2) setreuid, (3) setuid, and (4) seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail via attacks such as resource exhaustion.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-01-28  
Modified Date
2011-08-10  
Seq
2008-0008  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
158 8 CVE-2008-0008 http://bugs.gentoo.org/show_bug.cgi?id=207214  View
159 8 CVE-2008-0008 http://pulseaudio.org/changeset/2100  View
160 8 CVE-2008-0008 GLSA-200802-07  View
161 8 CVE-2008-0008 DSA-1476  View
162 8 CVE-2008-0008 MDVSA-2008:027  View
163 8 CVE-2008-0008 27449  View
164 8 CVE-2008-0008 USN-573-1  View
165 8 CVE-2008-0008 ADV-2008-0283  View
166 8 CVE-2008-0008 pulseaudio-padroproot-privilege-escalation(39992)  View
167 8 CVE-2008-0008 https://bugzilla.novell.com/show_bug.cgi?id=347822  View
168 8 CVE-2008-0008 https://bugzilla.redhat.com/show_bug.cgi?id=425481  View
169 8 CVE-2008-0008 FEDORA-2008-0963  View
170 8 CVE-2008-0008 FEDORA-2008-0994  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49992 JVNDB-2008-005302 PulseAudio の pa_drop_root 関数における権限を取得される脆弱性 PulseAudio の pa_drop_root 関数は、権限降格を試行する際、以下の呼び出しからリターン値をチェックしないため、権限を取得される脆弱性が存在します。 CVE-2008-0008 30121 CVE-2008-0008 8 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005302.html 2008-01-28 2012-12-20 View