CVE-2008-2359

High

Description

The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration.

SeverityHigh
CVSS7.2
Exploit probability—
ProductFedora 8 Consolehelper
PublishedJun 2, 2008
First seenJun 2, 2008

How to fix

Affected products

ProductAffected versionsFixed in
fedora_8 consolehelper1.4.4, 1.4.5, 1.4.6, 1.4.7, 1.5.0, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.5.6, 1.5.7, 1.5.8, 1.5.9, 1.5.10—
redhat fedora_81.4.4, 1.4.5, 1.4.6, 1.4.7, 1.5., 1.5.0, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.5.6, 1.5.7, 1.5.8, 1.5.9, 1.5.10—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.