The get_parameter_from_freqency_source function in beep2 1.0, 1.1 and 1.2, when installed setuid root, allows local users to read arbitrary files via unknown attack vectors.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Shingo_beep2 | Yamaguchi | 1.0 (including) | 1.0 (including) |
Shingo_beep2 | Yamaguchi | 1.0a (including) | 1.0a (including) |
Shingo_beep2 | Yamaguchi | 1.1 (including) | 1.1 (including) |
Shingo_beep2 | Yamaguchi | 1.2 (including) | 1.2 (including) |