Skip to content
OpenAdvisories
Unscored DSA-725-2 1 CVE

ppxp - missing privilege release

Published May 19, 2005 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 ppxp 0.2001080415-10sarge2

Vulnerabilities 1

  • Unscored —

    ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands.