fkie_cve-2008-2359
Vulnerability from fkie_nvd
Published
2008-06-02 21:30
Modified
2025-04-09 00:30
Severity ?
Summary
The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration.
References
secalert@redhat.comhttp://secunia.com/advisories/30399Vendor Advisory
secalert@redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=448557
secalert@redhat.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/42867
secalert@redhat.comhttps://www.redhat.com/archives/fedora-package-announce/2008-May/msg00974.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/30399Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=448557
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/42867
af854a3a-2127-422b-91ae-364da2661108https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00974.html
Impacted products
Vendor Product Version
fedora_8 consolehelper 1.4.4
fedora_8 consolehelper 1.4.5
fedora_8 consolehelper 1.4.6
fedora_8 consolehelper 1.4.7
fedora_8 consolehelper 1.5.0
fedora_8 consolehelper 1.5.1
fedora_8 consolehelper 1.5.2
fedora_8 consolehelper 1.5.3
fedora_8 consolehelper 1.5.4
fedora_8 consolehelper 1.5.5
fedora_8 consolehelper 1.5.6
fedora_8 consolehelper 1.5.7
fedora_8 consolehelper 1.5.8
fedora_8 consolehelper 1.5.9
fedora_8 consolehelper 1.5.10
redhat fedora_8 1.4.4
redhat fedora_8 1.4.5
redhat fedora_8 1.4.6
redhat fedora_8 1.4.7
redhat fedora_8 1.5.
redhat fedora_8 1.5.0
redhat fedora_8 1.5.1
redhat fedora_8 1.5.2
redhat fedora_8 1.5.3
redhat fedora_8 1.5.4
redhat fedora_8 1.5.5
redhat fedora_8 1.5.6
redhat fedora_8 1.5.7
redhat fedora_8 1.5.8
redhat fedora_8 1.5.9
redhat fedora_8 1.5.10


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fedora_8:consolehelper:1.4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "A211D52F-7305-457C-8155-1EAB48BA804C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedora_8:consolehelper:1.4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "09C3F8C3-A036-43E8-A61C-CFA9293A122E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedora_8:consolehelper:1.4.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "BA7DE87A-6FB9-4790-A030-C081797EDC9C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedora_8:consolehelper:1.4.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "B39845D3-6613-4DCE-82D9-15EAE5711C37",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedora_8:consolehelper:1.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7CAC23E-3C38-4A99-97D2-A20670EB6786",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedora_8:consolehelper:1.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "06365D39-9EBE-4A08-890F-D06804675292",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedora_8:consolehelper:1.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A7B65FB-0D99-4D79-BB52-249FB0C039BA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedora_8:consolehelper:1.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "07B4E348-64D1-4ACE-A8C8-89359B28058E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedora_8:consolehelper:1.5.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "9EE402E4-3527-4BBE-AFE4-103FB93ED50F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedora_8:consolehelper:1.5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8559FDD-C219-4B33-9A27-DAC9C3BF0647",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedora_8:consolehelper:1.5.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "778BA6A8-2248-4A95-BBF9-4CCE1354EC35",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedora_8:consolehelper:1.5.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "1DFD179E-AFBB-4982-A4D5-C049459E48A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedora_8:consolehelper:1.5.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C984080-AFC5-4DD9-BF60-9CC6ABA61212",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedora_8:consolehelper:1.5.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "0CB334E5-41F8-4166-96EF-E77CA45B4D61",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedora_8:consolehelper:1.5.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "8450DA26-EEF5-43AB-BCEA-5E3E0BEA6D3F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B89C796-07A5-4B2C-8A3E-D2771D13DD92",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "9632FAF4-9819-4B76-BB32-68EDBF0F03BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.4.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "89E20205-6680-479C-ADCC-8642137132D7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.4.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "A15A9615-BB8D-4FFB-901F-B04263AC632B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.5.:*:*:*:*:*:*:*",
              "matchCriteriaId": "82F0F091-6551-47AA-BF78-7635ECC7088A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3680916-6519-4B47-AE1B-CA6DCE88C931",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0B42C1A-0040-4618-A6BA-64BB81EB7F41",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "C206782C-AEA1-4F75-8B12-31AFB854BC2A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "E27A128F-F42E-4704-8E88-D9EB5AC7BC1B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.5.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "FCB55EE7-D477-4C2E-A54C-D9BE9144EEC5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD6519AF-E0E1-4E69-B1DA-8838EBB17344",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.5.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC708674-B69F-45CB-8522-53DF4BC14E41",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.5.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "CAF1159F-9386-4C55-97C6-520BE5ED788E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.5.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC6C08AD-39C8-4C06-AE65-0FB389D0C186",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.5.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "9AA87679-C78E-4CC6-A305-6872FA189B7E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:fedora_8:1.5.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "69E15299-3B24-4FC9-BB43-BD1AB9933B31",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration."
    },
    {
      "lang": "es",
      "value": "La configuraci\u00f3n predeterminada de consolehelper en system-config-network versiones anteriores a 1.5.10-1 en Fedora versi\u00f3n 8, carece de la directiva USER=root, lo que permite a los usuarios locales de la consola de la estaci\u00f3n de trabajo alcanzar privilegios y cambiar la configuraci\u00f3n de la red."
    }
  ],
  "id": "CVE-2008-2359",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.2,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2008-06-02T21:30:00.000",
  "references": [
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/30399"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=448557"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42867"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00974.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/30399"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=448557"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42867"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00974.html"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-16"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.