Vulnerability in Frox
CVE-2005-2807
frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows local users to read portions of arbitrary files via the -f command line option.
EPSS: 0.009 (57.5th percentile) — read the EPSS interpretation.
Affected products
- Frox — versions 0.7.18
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)