Skip to content
OpenAdvisories
Unscored DSA-655-1 1 CVE

zhcon - missing privilege release

Published Jan 25, 2005 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 zhcon 1:0.2-4woody3

Vulnerabilities 1

  • Unscored —

    zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read ar…