Summary
The remote host is missing an update to wmtv
announced via advisory DSA 092-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20092-1
Insight
Nicolas Boullis found a nasty security problem in the wmtv (a dockable video4linux tv player for windowmaker) package as distributed in Debian GNU/Linux 2.2.
wmtv can optionally run a command if you double-click on the tv window. This command can be specified using the -e command-line option. However since wmtv is installed suid root this command was also run as root, which gives local users a very simple way to get root access.
This has been fixed in version 0.6.5-2potato1 by dropping root privileges before executing the command. We recommend that you upgrade your wmtv package immediately.
Severity
Classification
-
CVE CVE-2001-1272 -
CVSS Base Score: 4.6
AV:L/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities