CVE-2008-2359 The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges an...
HighCVSS 7.2
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fedora 8 consolehelper | = 1.4.4 | No fix listed |
| fedora 8 consolehelper | = 1.4.5 | No fix listed |
| fedora 8 consolehelper | = 1.4.6 | No fix listed |
| fedora 8 consolehelper | = 1.4.7 | No fix listed |
| fedora 8 consolehelper | = 1.5.0 | No fix listed |
| fedora 8 consolehelper | = 1.5.1 | No fix listed |
| fedora 8 consolehelper | = 1.5.2 | No fix listed |
| fedora 8 consolehelper | = 1.5.3 | No fix listed |
| fedora 8 consolehelper | = 1.5.4 | No fix listed |
| fedora 8 consolehelper | = 1.5.5 | No fix listed |
| fedora 8 consolehelper | = 1.5.6 | No fix listed |
| fedora 8 consolehelper | = 1.5.7 | No fix listed |
| fedora 8 consolehelper | = 1.5.8 | No fix listed |
| fedora 8 consolehelper | = 1.5.9 | No fix listed |
| fedora 8 consolehelper | = 1.5.10 | No fix listed |
| redhat fedora 8 | = 1.4.4 | No fix listed |
| redhat fedora 8 | = 1.4.5 | No fix listed |
| redhat fedora 8 | = 1.4.6 | No fix listed |
| redhat fedora 8 | = 1.4.7 | No fix listed |
| redhat fedora 8 | = 1.5. | No fix listed |
| redhat fedora 8 | = 1.5.0 | No fix listed |
| redhat fedora 8 | = 1.5.1 | No fix listed |
| redhat fedora 8 | = 1.5.2 | No fix listed |
| redhat fedora 8 | = 1.5.3 | No fix listed |
| redhat fedora 8 | = 1.5.4 | No fix listed |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat fedora 8 | = 1.5.5 | No fix listed |
| redhat fedora 8 | = 1.5.6 | No fix listed |
| redhat fedora 8 | = 1.5.7 | No fix listed |
| redhat fedora 8 | = 1.5.8 | No fix listed |
| redhat fedora 8 | = 1.5.9 | No fix listed |
| redhat fedora 8 | = 1.5.10 | No fix listed |
References
- 30399 third-party-advisory vendor-advisory
- bugzilla.redhat.com
- fedora-consolehelper-privilege-escalation(42867) vdb-entry
- FEDORA-2008-4633 vendor-advisory