CVE-2008-2359
The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8...
The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration.
Exploit likelihood
What each source reports
NVD Score used
The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration.
- Record
CVE-2008-2359- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-16
- Updated
- 2026-11-02
CVE List No score
The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration.
- Record
CVE-2008-2359- Updated
- 2026-11-02
EUVDEUVD-2008-2355 No score
The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration.
- Record
EUVD-2008-2355- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7cr9-4h7r-hh9g No score
The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8...
The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration.
- Record
GHSA-7cr9-4h7r-hh9g- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2359 is a high vulnerability (CVSS 7.2) in Fedora 8 Consolehelper, published June 2, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 23rd percentile. No source names a fixed version.