high7.2
CVE-2008-2359
The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the …
Impact
The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fedora 8 | Consolehelper | Versions 1.4.4, 1.4.5, 1.4.6, 1.4.7, 1.5.0, 1.5.1 |
| Redhat | Fedora 8 | Versions 1.4.4, 1.4.5, 1.4.6, 1.4.7, 1.5., 1.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/30399
- https://bugzilla.redhat.com/show_bug.cgi?id=448557
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42867
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00974.html
- http://secunia.com/advisories/30399
- https://bugzilla.redhat.com/show_bug.cgi?id=448557
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42867
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00974.html