Xorg / XFree86 file existence disclosure vulnerability
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 2.1 | |||
| XFree86-0:4.1.0-86.EL | cpe:/o:redhat:enterprise_linux:2.1 | RHSA-2008:0029 | 2008-01-18T00:00:00Z |
| Red Hat Enterprise Linux 3 | |||
| XFree86-0:4.3.0-126.EL | cpe:/o:redhat:enterprise_linux:3 | RHSA-2008:0029 | 2008-01-18T00:00:00Z |
| Red Hat Enterprise Linux 4 | |||
| xorg-x11-0:6.8.2-1.EL.33.0.2 | cpe:/o:redhat:enterprise_linux:4 | RHSA-2008:0030 | 2008-01-17T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| xorg-x11-server-0:1.1.1-48.26.el5_1.5 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2008:0031 | 2008-01-17T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1466-1 | New xorg-server packages fix several vulnerabilities |
Debian DSA |
DSA-1466-2 | New xorg-server packages fix regression |
Debian DSA |
DSA-1466-3 | New xfree86 packages fix regression |
EUVD |
EUVD-2007-5928 | X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists. |
Ubuntu USN |
USN-571-1 | X.org vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 5.3% (5.332% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.