Skip to content
OpenAdvisories
Unscored DSA-725-1 1 CVE

ppxp - missing privilege release

Published May 19, 2005 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 ppxp 0.2001080415-6woody2

Vulnerabilities 1

  • Unscored —

    ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands.