xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux | Redhat | 5.1 (including) | 5.1 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=90221101926021\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=90221101926034\u0026w=2
- http://www.iss.net/security_center/static/8787.php
- http://www.securityfocus.com/bid/362
- http://marc.info/?l=bugtraq\u0026m=90221101926021\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=90221101926034\u0026w=2
- http://www.iss.net/security_center/static/8787.php
- http://www.securityfocus.com/bid/362