Upstream information
Description
Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files.SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
NVD | |
---|---|
Base Score | 7.2 |
Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Access Vector | Local |
Access Complexity | Low |
Authentication | None |
Confidentiality Impact | Complete |
Integrity Impact | Complete |
Availability Impact | Complete |
SUSE Timeline for this CVE
CVE page created: Fri Jun 28 00:55:41 2013CVE page last modified: Mon Sep 9 16:19:34 2024