RSS   Vulnerabilities for 'Ktsuss'   RSS

2019-11-19
 
CVE-2011-2922

CWE-20
 

 
ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTK_MODULES" environment variable to possibly execute arbitrary code.

 
 
CVE-2011-2921

CWE-273
 

 
ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.

 


Copyright 2024, cxsecurity.com

 

Back to Top