Vulnerability in Fedora 8 Consolehelper

CVE-2008-2359

The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration.

EPSS: 0.003 (22.8th percentile) — read the EPSS interpretation.

Affected products

Fedora_8 Consolehelper — versions 1.4.4, 1.4.5, 1.4.6
Redhat Fedora_8 — versions 1.4.4, 1.4.5, 1.4.6
N/a — versions n/a

Weakness classification (CWE)

CWE-16

References

secalert@redhat.com (vdb-entry, x_refsource_XF)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)
secalert@redhat.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)