FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2007-5958

This CVE name corresponds to:

Entered Topic
2008-01-23 xorg -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2007-5958
Phase Assigned(20071114)

Description

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.

References

Source Reference
BUGTRAQ 20080130 rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs
MILW0RM 5152
MLIST [xorg] 20080117 X.Org security advisory: multiple vulnerabilities in the X server
CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=204362
CONFIRM https://issues.rpath.com/browse/RPL-1970
CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm
CONFIRM http://docs.info.apple.com/article.html?artnum=307562
APPLE APPLE-SA-2008-03-18
DEBIAN DSA-1466
FEDORA FEDORA-2008-0760
FEDORA FEDORA-2008-0831
GENTOO GLSA-200801-09
GENTOO GLSA-200804-05
GENTOO GLSA-200805-07
HP HPSBUX02381
HP SSRT080083
MANDRIVA MDVSA-2008:021
MANDRIVA MDVSA-2008:022
MANDRIVA MDVSA-2008:023
MANDRIVA MDVSA-2008:025
OPENBSD [4.1] 20080208 012: SECURITY FIX: February 8, 2008
OPENBSD [4.2] 20080208 006: SECURITY FIX: February 8, 2008
REDHAT RHSA-2008:0029
REDHAT RHSA-2008:0030
REDHAT RHSA-2008:0031
SUNALERT 103205
SUNALERT 230901
SUSE SUSE-SA:2008:003
SUSE SUSE-SR:2008:008
UBUNTU USN-571-1
BID 27336
BID 27356
OVAL oval:org.mitre.oval:def:10991
SECUNIA 32545
VUPEN ADV-2008-0179
VUPEN ADV-2008-0184
VUPEN ADV-2008-0497
VUPEN ADV-2008-0924
OVAL oval:org.mitre.oval:def:5393
SECTRACK 1019232
SECUNIA 28532
SECUNIA 28535
SECUNIA 28536
SECUNIA 28539
SECUNIA 28540
SECUNIA 28542
SECUNIA 28543
SECUNIA 28550
SECUNIA 28273
SECUNIA 28592
SECUNIA 28616
SECUNIA 28584
SECUNIA 28718
SECUNIA 28843
SECUNIA 28885
SECUNIA 28997
SECUNIA 29420
SECUNIA 29622
SECUNIA 29707
SECUNIA 30161
VUPEN ADV-2008-3000
XF xorg-xsp-information-disclosure(39769)