← All advisories

Unrated severityNVD Advisory· Published Jan 24, 2005· Updated Jun 16, 2026

CVE-2005-0072

CVE-2005-0072

Description

zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files.

Affected products

2

Ejoy And Hu Yong/Zhcon
cpe:2.3:a:ejoy_and_hu_yong:zhcon:0.2:*:*:*:*:*:*:*
zhcon/zhconllm-fuzzy
Range: <0.2

Patches

Vulnerability mechanics

References

8

www.debian.org/security/2005/dsa-655nvdExploitPatchVendor Advisory
secunia.com/advisories/13977nvd
secunia.com/advisories/13982nvd
secunia.com/advisories/13987nvd
securitytracker.com/idnvd
www.mandriva.com/security/advisoriesnvd
www.securityfocus.com/bid/12343nvd
exchange.xforce.ibmcloud.com/vulnerabilities/19045nvd

News mentions

0

No linked articles in our index yet.