Xonix X11游戏不安全权限漏失漏洞

漏洞信息详情

Xonix X11游戏不安全权限漏失漏洞

• CNNVD编号：CNNVD-200406-001
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2004-0157
  
• 漏洞类型：
  
  
  设计错误
  
• 发布时间：
  
  2004-06-01
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-28
  
• 厂        商：
  
  xonix
• 漏洞来源：
  Discovery is credi…

xonix 1.4及其早期版本的x11.c使用当前的工作目录发现和执行rmail程序。本地用户通过修改指向恶意rmail程序的路径执行任意代码。

Debian has released an advisory DSA 484-1 to address this issue. Please see the referenced advisory for more information.
xonix xonix 1.4

• Debian xonix_1.4-19woody1_alpha.debDebian GNU/Linux 3.0 alias woody.
  
  http://security.debian.org/pool/updates/main/x/xonix/xonix_1.4-19woody
  1_alpha.deb
• Debian xonix_1.4-19woody1_arm.debDebian GNU/Linux 3.0 alias woody.
  
  http://security.debian.org/pool/updates/main/x/xonix/xonix_1.4-19woody
  1_arm.deb
• Debian xonix_1.4-19woody1_hppa.debDebian GNU/Linux 3.0 alias woody.
  
  http://security.debian.org/pool/updates/main/x/xonix/xonix_1.4-19woody
  1_hppa.deb
• Debian xonix_1.4-19woody1_i386.debDebian GNU/Linux 3.0 alias woody.
  
  http://security.debian.org/pool/updates/main/x/xonix/xonix_1.4-19woody
  1_i386.deb
• Debian xonix_1.4-19woody1_ia64.debDebian GNU/Linux 3.0 alias woody.
  
  http://security.debian.org/pool/updates/main/x/xonix/xonix_1.4-19woody
  1_ia64.deb
• Debian xonix_1.4-19woody1_m68k.debDebian GNU/Linux 3.0 alias woody.
  
  http://security.debian.org/pool/updates/main/x/xonix/xonix_1.4-19woody
  1_m68k.deb
• Debian xonix_1.4-19woody1_mips.debDebian GNU/Linux 3.0 alias woody.
  
  http://security.debian.org/pool/updates/main/x/xonix/xonix_1.4-19woody
  1_mips.deb
• Debian xonix_1.4-19woody1_mipsel.debDebian GNU/Linux 3.0 alias woody.
  
  http://security.debian.org/pool/updates/main/x/xonix/xonix_1.4-19woody
  1_mipsel.deb
• Debian xonix_1.4-19woody1_powerpc.debDebian GNU/Linux 3.0 alias woody.
  
  http://security.debian.org/pool/updates/main/x/xonix/xonix_1.4-19woody
  1_powerpc.deb
• Debian xonix_1.4-19woody1_s390.debDebian GNU/Linux 3.0 alias woody.
  
  http://security.debian.org/pool/updates/main/x/xonix/xonix_1.4-19woody
  1_s390.deb
• Debian xonix_1.4-19woody1_sparc.debDebian GNU/Linux 3.0 alias woody.
  
  http://security.debian.org/pool/updates/main/x/xonix/xonix_1.4-19woody
  1_sparc.deb

来源: DEBIAN
名称: DSA-484
链接:http://www.debian.org/security/2004/dsa-484

来源: XF
名称: xonix-privilege-dropping(15873)
链接:http://xforce.iss.net/xforce/xfdb/15873

来源: BID
名称: 10149
链接:http://www.securityfocus.com/bid/10149

来源: OSVDB
名称: 5358
链接:http://www.osvdb.org/5358

来源: shellcode.org
链接:http://shellcode.org/Advisories/XONIX.txt

来源: SECTRACK
名称: 1009789
链接:http://securitytracker.com/id?1009789

来源: SECUNIA
名称: 11382
链接:http://secunia.com/advisories/11382