CVE-2007-5958
MEDIUM 5.0EPSS 5.3%
X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.
- CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 5.33% chance of exploitation in the next 30 days, 93rd percentile
- Published
- 2008-01-18
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103205-1
- http://www.securityfocus.com/bid/27336
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:021
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:022
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:023
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:025
- http://www.redhat.com/support/errata/RHSA-2008-0029.html
- http://www.redhat.com/support/errata/RHSA-2008-0030.html
- http://www.redhat.com/support/errata/RHSA-2008-0031.html
- http://www.securityfocus.com/bid/27356
- https://usn.ubuntu.com/571-1