CVE-2005-0070

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
May 2, 2005
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2005

CVE-2005-00715.0vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files.CVE-2005-00722.1zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files.CVE-2005-00734.6Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code.CVE-2005-00747.2Buffer overflow in pcdsvgaview in xpcd 2.08 allows local users to execute arbitrary code.CVE-2005-00755.0prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail coCVE-2005-00767.2Multiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary code via setuid applications that use the librCVE-2005-00772.1The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file.CVE-2005-00784.6The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with CVE-2005-00794.6Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session.CVE-2005-00805.0The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail adCVE-2005-00815.0MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via an HTTP request wiCVE-2005-00825.0The sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of se
CVE-2005-0070: High severity, CVSS 7.2 | Vulnix