festival: The Festival Speech Synthesis System ---------------------------------------------------------------------- File: festival-1.95-25.9.ppc.rpm Patchrpm: festival-1.95-25.9.ppc.patch.rpm Version: 1.95-25.9 Size: 6905 kB Patchsize: 1516 kB Date: Thu 20 Sep 2007 15:14:46 CEST Source: festival-1.95-25.9.src.rpm Security: Yes ---------------------------------------------------------------------- Description: The festival daemon runs as root. The default config doesn't have a password set. A local attacker could therefore connect to the daemon to have commands executed as root (CVE-2007-4074).