VULNERABILITY INTELLIGENCE

CVE-2009-1573

CVSS score4.6 MEDIUM
EPSS probability0.46%
CISA KEVNot currently listed
Published2009-05-06
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by listing the process and its arguments.

Primary references