CVE-2005-0392

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
May 19, 2005
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2005

CVE-2005-03937.2The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack CVE-2005-03962.1Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service (dcopserver CVE-2005-03977.5Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denCVE-2005-03985.0The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.CVE-2005-03995.1Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other apCVE-2005-04002.1The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new diCVE-2005-04015.1FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop eCVE-2005-04022.6Firefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into saving a page as a Firefox sidebar panel, theCVE-2005-04037.2init_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threadCVE-2005-04045.0KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypteCVE-2005-04065.5A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an inCVE-2005-04074.3Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitr
CVE-2005-0392: High severity, CVSS 7.2 | Vulnix