CVE-2008-0008

The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresuid, (2) setreuid, (3) setuid, and (4) seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail via attacks such as resource exhaustion.

Link	Resource
https://tango.0pointer.de/pipermail/pulseaudio-discuss/2008-January/001228.html
http://pulseaudio.org/changeset/2100	Exploit
https://bugzilla.novell.com/show_bug.cgi?id=347822
https://bugzilla.redhat.com/show_bug.cgi?id=425481
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00852.html
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00869.html
http://www.securityfocus.com/bid/27449
http://secunia.com/advisories/28623	Vendor Advisory
http://www.debian.org/security/2008/dsa-1476
http://www.mandriva.com/security/advisories?name=MDVSA-2008:027
http://secunia.com/advisories/28608	Vendor Advisory
http://www.ubuntu.com/usn/usn-573-1
http://secunia.com/advisories/28738	Vendor Advisory
http://security.gentoo.org/glsa/glsa-200802-07.xml
http://bugs.gentoo.org/show_bug.cgi?id=207214
http://secunia.com/advisories/28952	Vendor Advisory
http://www.vupen.com/english/advisories/2008/0283	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/39992

Configuration 1

---

Published : 2008-01-29 12:00

Updated : 2017-07-29 01:34

---

NVD link : CVE-2008-0008

Mitre link : CVE-2008-0008

No products.

CWE-20