CVE-2009-1573

Fixed in a distro release EPSS <1%

xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by listing the process and its arguments.

Published 2009-05-06 · CVE record · OSV

Products: debian_linux, redhat fedora, ubuntu linux, branden_robinson xvfb-run

Distro releases