CVE-2007-5958: x.org xserver

CVSS: 5.0v2.0MediumModified

AliasesDEBIAN-CVE-2007-5958

Published 18-01-2008Last modified 07-08-2024

Vulnerability summary

CVE-2007-5958 is a medium (CVSS 5.0) vulnerability in x.org xserver. EPSS estimates a 5.33% chance of exploitation in the next 30 days, higher than 92.5% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

5.33%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 5

DSA-1466-2 DTSA-110-1 RHSA-2008:0029 RHSA-2008:0030 RHSA-2008:0031

Timeline

18-01-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

5.33%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 5.33% on 18-09-2026

18-09-202618-10-2026

EPSS score

5.33%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedosmultipleVerified
X.Org xorg-server 1.1.1-48.13 - Probe for Files (PoC)
Maturity: poc

Weaknesses

CWE · root cause

CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Affected systems

Debian1 product

xorg-server< 2:1.4.1~git20080105-2

X.org1 product

xserver≤ 1.4

2 vendors · 2 products

References

62 links

secunia.com/advisories/28542Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/27336VDB EntryX Refsource BIDPatch
www.vupen.com/english/advisories/2008/0184VDB EntryX Refsource VUPEN
secunia.com/advisories/29622Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.htmlVendor AdvisoryX Refsource FEDORA
lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/28532Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-26-103205-1Vendor AdvisoryX Refsource SUNALERTPatch
secunia.com/advisories/29707Third Party AdvisoryX Refsource SECUNIA

Show all 62 references

www.exploit-db.com/exploits/5152ExploitX Refsource EXPLOIT DB
secunia.com/advisories/28843Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2008/dsa-1466Vendor AdvisoryX Refsource DEBIAN
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10991VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/28540Third Party AdvisoryX Refsource SECUNIA
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321Vendor AdvisoryX Refsource HP
issues.rpath.com/browse/RPL-1970X Refsource CONFIRM
www.securityfocus.com/archive/1/487335/100/0/threadedMailing ListX Refsource BUGTRAQ
www.mandriva.com/security/advisories?name=MDVSA-2008:021Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2008/0924/referencesVDB EntryX Refsource VUPEN
secunia.com/advisories/28997Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/28718Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-26-230901-1Vendor AdvisoryX Refsource SUNALERT
www.redhat.com/support/errata/RHSA-2008-0029.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/28584Third Party AdvisoryX Refsource SECUNIA
www.openbsd.org/errata41.htmlVendor AdvisoryX Refsource OPENBSD
secunia.com/advisories/28592Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/29420Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDVSA-2008:022Vendor AdvisoryX Refsource MANDRIVA
lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlVendor AdvisoryX Refsource APPLE
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5393VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/30161Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200805-07.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/support/errata/RHSA-2008-0030.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/28543Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/28273Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-0031.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/28550Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/0497/referencesVDB EntryX Refsource VUPEN
bugs.gentoo.org/show_bug.cgi?id=204362X Refsource CONFIRM
www.mandriva.com/security/advisories?name=MDVSA-2008:023Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/28885Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDVSA-2008:025Vendor AdvisoryX Refsource MANDRIVA
support.avaya.com/elmodocs2/security/ASA-2008-084.htmX Refsource CONFIRM
usn.ubuntu.com/571-1/Vendor AdvisoryX Refsource UBUNTU
security.gentoo.org/glsa/glsa-200804-05.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/28535Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/3000VDB EntryX Refsource VUPEN
docs.info.apple.com/article.html?artnum=307562X Refsource CONFIRM
lists.freedesktop.org/archives/xorg/2008-January/031918.htmlMailing ListX Refsource MLIST
secunia.com/advisories/32545Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1019232VDB EntryX Refsource SECTRACK
www.openbsd.org/errata42.htmlVendor AdvisoryX Refsource OPENBSD
secunia.com/advisories/28539Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/28616Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/28536Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/27356VDB EntryX Refsource BID
security.gentoo.org/glsa/glsa-200801-09.xmlVendor AdvisoryX Refsource GENTOO
exchange.xforce.ibmcloud.com/vulnerabilities/39769VDB EntryX Refsource XF
www.vupen.com/english/advisories/2008/0179VDB EntryX Refsource VUPEN
security-tracker.debian.org/tracker/CVE-2007-5958Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities