Unscored severity · published May 6, 2009
CVE-2009-1573
xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain…
–
CVSS
0.5%
EPSS
No
On KEV
Description
xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by listing the process and its arguments.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
All versions, or not specified · source: NVD
FE
Fedora · Redhat
10 · source: NVD
LI
Linux · Ubuntu
All versions, or not specified · source: NVD
XV
Xvfb-run · Branden Robinson
1.6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1573
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1573
Exploit
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526678
secunia.com
http://secunia.com/advisories/39834
www.openwall.com
http://www.openwall.com/lists/oss-security/2009/05/05/2
www.openwall.com
http://www.openwall.com/lists/oss-security/2009/05/05/4
www.securityfocus.com
http://www.securityfocus.com/bid/34828
www.ubuntu.com
http://www.ubuntu.com/usn/USN-939-1