The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUG_FILE environment variable, which is used to create world-writable files when libXm is run from a setuid program.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lesstif | Lesstif | * | 0.95.0 (including) |
| Lesstif | Lesstif | 0.93.94 (including) | 0.93.94 (including) |
| Lesstif1-1 | Ubuntu | dapper | * |
| Lesstif1-1 | Ubuntu | edgy | * |