high7.2Public exploit code
CVE-2005-2807
frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows local users to read portions of arbitr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Frox 0.7.18 - Arbitrary Configuration File Access2005-09-01 · local · linux · Verified
Impact
frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows local users to read portions of arbitrary files via the -f command line option.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Frox | Frox | Version 0.7.18 |