CVE-2007-5958

Public Exploit

Description

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.

Category

5.0
CVSS
Severity: Medium
CVSS 2.0 •
EPSS 4.56% Top 15%
Vendor Advisory redhat.com Vendor Advisory opensuse.org Vendor Advisory opensuse.org Vendor Advisory sun.com Vendor Advisory debian.org Vendor Advisory hp.com Vendor Advisory mandriva.com Vendor Advisory sun.com Vendor Advisory redhat.com Vendor Advisory openbsd.org Vendor Advisory mandriva.com Vendor Advisory apple.com Vendor Advisory gentoo.org Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory mandriva.com Vendor Advisory mandriva.com Vendor Advisory ubuntu.com Vendor Advisory gentoo.org Vendor Advisory openbsd.org Vendor Advisory redhat.com Vendor Advisory gentoo.org
Affected: n/a n/a
Published at:
Updated at:

References

Link Tags
http://secunia.com/advisories/28542 third party advisory
http://www.securityfocus.com/bid/27336 vdb entry patch
http://www.vupen.com/english/advisories/2008/0184 vdb entry
http://secunia.com/advisories/29622 third party advisory
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html vendor advisory
http://secunia.com/advisories/28532 third party advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103205-1 patch vendor advisory
http://secunia.com/advisories/29707 third party advisory
https://www.exploit-db.com/exploits/5152 exploit
http://secunia.com/advisories/28843 third party advisory
http://www.debian.org/security/2008/dsa-1466 vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10991 vdb entry signature
http://secunia.com/advisories/28540 third party advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 vendor advisory
https://issues.rpath.com/browse/RPL-1970
http://www.securityfocus.com/archive/1/487335/100/0/threaded mailing list
http://www.mandriva.com/security/advisories?name=MDVSA-2008:021 vendor advisory
http://www.vupen.com/english/advisories/2008/0924/references vdb entry
http://secunia.com/advisories/28997 third party advisory
http://secunia.com/advisories/28718 third party advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-230901-1 vendor advisory
http://www.redhat.com/support/errata/RHSA-2008-0029.html vendor advisory
http://secunia.com/advisories/28584 third party advisory
http://www.openbsd.org/errata41.html#012_xorg vendor advisory
http://secunia.com/advisories/28592 third party advisory
http://secunia.com/advisories/29420 third party advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 vendor advisory
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5393 vdb entry signature
http://secunia.com/advisories/30161 third party advisory
http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml vendor advisory
http://www.redhat.com/support/errata/RHSA-2008-0030.html vendor advisory
http://secunia.com/advisories/28543 third party advisory
http://secunia.com/advisories/28273 third party advisory
http://www.redhat.com/support/errata/RHSA-2008-0031.html vendor advisory
http://secunia.com/advisories/28550 third party advisory
http://www.vupen.com/english/advisories/2008/0497/references vdb entry
http://bugs.gentoo.org/show_bug.cgi?id=204362
http://www.mandriva.com/security/advisories?name=MDVSA-2008:023 vendor advisory
http://secunia.com/advisories/28885 third party advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:025 vendor advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm
https://usn.ubuntu.com/571-1/ vendor advisory
http://security.gentoo.org/glsa/glsa-200804-05.xml vendor advisory
http://secunia.com/advisories/28535 third party advisory
http://www.vupen.com/english/advisories/2008/3000 vdb entry
http://docs.info.apple.com/article.html?artnum=307562
http://lists.freedesktop.org/archives/xorg/2008-January/031918.html mailing list
http://secunia.com/advisories/32545 third party advisory
http://securitytracker.com/id?1019232 vdb entry
http://www.openbsd.org/errata42.html#006_xorg vendor advisory
http://secunia.com/advisories/28539 third party advisory
http://secunia.com/advisories/28616 third party advisory
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html vendor advisory
http://secunia.com/advisories/28536 third party advisory
http://www.securityfocus.com/bid/27356 vdb entry
http://security.gentoo.org/glsa/glsa-200801-09.xml vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/39769 vdb entry
http://www.vupen.com/english/advisories/2008/0179 vdb entry

Frequently Asked Questions

What is the severity of CVE-2007-5958?
CVE-2007-5958 has been scored as a medium severity vulnerability.
How to fix CVE-2007-5958?
To fix CVE-2007-5958, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2007-5958 being actively exploited in the wild?
It is possible that CVE-2007-5958 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~5% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.