Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2009-1573

xvfb-run insecurely displays mcookie value

xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by listing the process and its arguments.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Branden Robinson Debian Redhat and 1 more
Products
Xvfb-run Debian Linux Fedora and 1 more