Skip to content
OpenAdvisories
Unscored DSA-405 1 CVE

xsok - missing privilege release

Published Dec 30, 2003 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 xsok 1.02-9woody2

Vulnerabilities 1

  • Unscored —

    xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users…