Description
The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration.
References
- fedora-consolehelper-privilege-escalation(42867) vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=448557
- FEDORA-2008-4633 vendor-advisory
- 30399 third-party-advisory