What’s Vulnerable › Vulnerabilities

CVE-2008-1877

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-04-17 · updated 2026-06-16
• Weakness: CWE-264

Description

tss 0.8.1 allows local users to read arbitrary files via the -a parameter, which is processed while tss is running with privileges.

Affected products

• Debian Tss: 0.8.1, 0.8.2, 0.8.3

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475747
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41929
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475747
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41929

Get alerted when CVE-2008-1877 or the next vulnerability affects your stack