CVE-2009-1573

xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows…

published May 6, 2009

CVSS
—
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by listing the process and its arguments.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.6th percentile
Published
2009-05-06T17:00Z
EPSS history
Timeline
  • 06 MAY 17:00Z
    xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows…
    cvelistv5