CVE-2007-5958

X.Org Xserver <1.4.1 - Info Disclosure

Title source: llm

Description

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.

Exploits (1)

exploitdb WORKING POC VERIFIED
by vl4dZ · bashdosmultiple
https://www.exploit-db.com/exploits/5152

References (61)

... and 41 more

Scores

EPSS 0.0360
EPSS Percentile 87.8%

Details

CWE
CWE-200
Status published
Products (1)
x.org/xserver < 1.4
Published Jan 18, 2008
Tracked Since Feb 18, 2026