New Search

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program which produces different error messages depending on whether the filename exists.

oval:org.mitre.oval:def:10991

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program which produces different error messages depending on whether the filename exists.

Family:
unix
Status:
ACCEPTED
Platform(s):
  • Red Hat Enterprise Linux 4
  • CentOS Linux 3
  • Oracle Linux 5
  • Red Hat Enterprise Linux 3
  • Oracle Linux 4
  • Red Hat Enterprise Linux 5
  • CentOS Linux 5
  • CentOS Linux 4
Class:
vulnerability
Reference(s):
  • CVE-2007-5958
Product(s):