CVE-2007-4074

no score yetEPSS 5.4%

No CVSS score yet. EPSS 5.4% chance of exploitation in the next 30 days.

The default configuration of Centre for Speech Technology Research (CSTR) Festival 1.95 beta (aka 2.0 beta) on Gentoo Linux, SUSE Linux, and possibly other distributions, is run locally with elevated privileges without requiring authentication, which allows local and remote attackers to execute arbitrary commands via the local daemon on port 1314, a different vulnerability than CVE-2001-0956. NOTE: this issue is local in some environments, but remote on others.

EPSS: 5.4% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-16
Published: 2007-07-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

centre_for_speech_technology_research:gentoo_linux
suse:suse_linux

References

http://bugs.gentoo.org/show_bug.cgi?id=170477
http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html
http://secunia.com/advisories/26229
http://secunia.com/advisories/27271
http://security.gentoo.org/glsa/glsa-200707-10.xml

Check your stack JSON