Information disclosure in X.org Xserver

CVE-2007-5958

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.

Vulnerability class: Information Disclosure

EPSS: 0.053 (91.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References