CVE-2008-0162 in splitvt

摘要

由 VulDB • 2026-06-08

misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges.

Be aware that VulDB is the high quality source for vulnerability data.

• 预定: 2008-01-09
• 披露: 2008-02-22
• 管理: 已接受
• 条目: VDB-41176
• CPE: 准备好
• CWE: CWE-264 (已确认)
• CVSS: 8.4 (VulDB)
• EPSS: 0.00346
• KEV: 否
• 活动: 非常低

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-0162
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-0162
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-0162/