CVE-2009-1573
No CVSS score yet. EPSS 0.5% chance of exploitation in the next 30 days.
xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by listing the process and its arguments.
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- branden_robinson:xvfb-run
- debian:debian_linux
- redhat:fedora
- ubuntu:linux