CVE-2008-0162
UnknownEPSS 0.35%
Last modified
CVE-2008-0162 is a vulnerability of currently unknown severity. misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges.. EPSS estimates a 0.35% chance of exploitation in the next 30 days.
Description
misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sam Lantinga | Splitvt | <= 1.6.6 |
References
- http://secunia.com/advisories/29064Vendor Advisory
- http://secunia.com/advisories/29080Vendor Advisory
- http://secunia.com/advisories/29064Vendor Advisory
- http://secunia.com/advisories/29080Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-0162?
misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges.
How severe is CVE-2008-0162?
Severity scoring for CVE-2008-0162 is pending analysis. The EPSS model estimates a 0.35% probability of exploitation in the next 30 days.
How do I fix CVE-2008-0162?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-0154SQL injection vulnerability in index.php in EvilBoard 0.1a (…
- CVE-2008-0155Cross-site scripting (XSS) vulnerability in index.php in Evi…
- CVE-2008-0156Absolute path traversal vulnerability in index.php in Millio…
- CVE-2008-0157SQL injection vulnerability in FlexBB 0.6.3 and earlier allo…
- CVE-2008-0158Directory traversal vulnerability in index.php in Shop-Scrip…
- CVE-2008-0159SQL injection vulnerability in index.php in eggBlog 3.1.0 an…
- CVE-2008-0163Linux kernel 2.6, when using vservers, allows local users to…
- CVE-2008-0164Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2008-0165Cross-site request forgery (CSRF) vulnerability in Ikiwiki b…
- CVE-2008-0166OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-ba…7.5
- CVE-2008-0167The write_array_file function in utils/include.pl in GForge …
- CVE-2008-0169Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiw…
Are you affected by CVE-2008-0162?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST