CVE-2007-5958 Information disclosure in n/a
Local attackers can determine the existence of arbitrary files via error message differences in the X server's -sp option.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-5958?
CVE-2007-5958 is a medium-severity vulnerability in n/a, published on 18 Jan 2008. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.
Weakness: CWE-200
Which versions are affected by CVE-2007-5958?
It affects 1 product.
Products include X.org Xserver.
How do I fix CVE-2007-5958?
Upgrade to a fixed version.
Is CVE-2007-5958 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-5958 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2007-5958, GHSA-5jgc-m9p6-5f9w.