XWine WINE Configuration File Local Arbitrary Command Execution Vulnerability

Bugtraq ID:	28369
Class:	Design Error
CVE:	CVE-2008-0931
Remote:	No
Local:	Yes
Published:	Mar 20 2008 12:00AM
Updated:	Mar 25 2008 02:09PM
Credit:	Steve Kemp from the Debian Security Audit project
Vulnerable:	Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Darken33 XWine 1.0.1 + Debian Linux 4.0 sparc + Debian Linux 4.0 s/390 + Debian Linux 4.0 powerpc + Debian Linux 4.0 mipsel + Debian Linux 4.0 mips + Debian Linux 4.0 m68k + Debian Linux 4.0 ia-64 + Debian Linux 4.0 ia-32 + Debian Linux 4.0 hppa + Debian Linux 4.0 arm + Debian Linux 4.0 amd64 + Debian Linux 4.0 alpha + Debian Linux 4.0

Not Vulnerable: