Description
The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to gain root privileges.
References
- sonata-command-execute(5787) vdb-entry
- 2125 vdb-entry
- 20001218 More Sonata Conferencing software vulnerabilities. mailing-list