festival: The Festival Speech Synthesis System ---------------------------------------------------------------------- File: festival-1.95-25.9.i586.rpm Patchrpm: festival-1.95-25.9.i586.patch.rpm Version: 1.95-25.9 Size: 6931 kB Patchsize: 1547 kB Date: Thu 20 Sep 2007 15:12:47 CEST Source: festival-1.95-25.9.src.rpm Security: Yes ---------------------------------------------------------------------- Description: The festival daemon runs as root. The default config doesn't have a password set. A local attacker could therefore connect to the daemon to have commands executed as root (CVE-2007-4074).