CVE-2007-5958

Published: Jan 18, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.

Affected (1)

Products: X.org: Xserver

X.org

1 product

Xserver

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
X.org Xserver	Up to 1.4

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (122)

http://bugs.gentoo.org/show_bug.cgi?id=204362

Source: secalert@redhat.com

http://docs.info.apple.com/article.html?artnum=307562

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: secalert@redhat.com

http://lists.freedesktop.org/archives/xorg/2008-January/031918.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html

Source: secalert@redhat.com

http://secunia.com/advisories/28273

Source: secalert@redhat.com

http://secunia.com/advisories/28532

Source: secalert@redhat.com

http://secunia.com/advisories/28535

Source: secalert@redhat.com

http://secunia.com/advisories/28536

Source: secalert@redhat.com

http://secunia.com/advisories/28539

Source: secalert@redhat.com

http://secunia.com/advisories/28540

Source: secalert@redhat.com

http://secunia.com/advisories/28542

Source: secalert@redhat.com

http://secunia.com/advisories/28543

Source: secalert@redhat.com

http://secunia.com/advisories/28550

Source: secalert@redhat.com

http://secunia.com/advisories/28584

Source: secalert@redhat.com

http://secunia.com/advisories/28592

Source: secalert@redhat.com

http://secunia.com/advisories/28616

Source: secalert@redhat.com

http://secunia.com/advisories/28718

Source: secalert@redhat.com

http://secunia.com/advisories/28843

Source: secalert@redhat.com

http://secunia.com/advisories/28885

Source: secalert@redhat.com

http://secunia.com/advisories/28997

Source: secalert@redhat.com

http://secunia.com/advisories/29420

Source: secalert@redhat.com

http://secunia.com/advisories/29622

Source: secalert@redhat.com

http://secunia.com/advisories/29707

Source: secalert@redhat.com

http://secunia.com/advisories/30161

Source: secalert@redhat.com

http://secunia.com/advisories/32545

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200801-09.xml

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200804-05.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1019232

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103205-1

Source: secalert@redhat.com

Patch

http://sunsolve.sun.com/search/document.do?assetkey=1-26-230901-1

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1466

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:021

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:022

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:023

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:025

Source: secalert@redhat.com

http://www.openbsd.org/errata41.html#012_xorg

Source: secalert@redhat.com

http://www.openbsd.org/errata42.html#006_xorg

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0029.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0030.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0031.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/487335/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/27336

Source: secalert@redhat.com

Patch

http://www.securityfocus.com/bid/27356

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0179

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0184

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0497/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0924/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/3000

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/39769

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1970

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10991

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5393

Source: secalert@redhat.com

https://usn.ubuntu.com/571-1/

Source: secalert@redhat.com

https://www.exploit-db.com/exploits/5152

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html

Source: secalert@redhat.com

http://bugs.gentoo.org/show_bug.cgi?id=204362