← Back

Xsok

xsok

Vendor: Michael Bischoff • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2004-0074
1Michael Bischoff
1Xsok
Apr 16, 2026
Feb 17, 2004
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, or (2) a long -xsokdir command line argument, a different vulnerability than CVE-2003-0949.
CVE-2003-0949
1Michael Bischoff
1Xsok
Apr 16, 2026
Feb 3, 2004
N/A· v4
N/A· v3
4.6 MEDIUM· v2
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.