CVE-2008-2359: Fedora 8 Consolehelper

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration.

Affected products

• Fedora 8 Consolehelper: version 1.4.4 only; version 1.4.5 only; version 1.4.6 only; version 1.4.7 only; version 1.5.0 only; version 1.5.1 only; …
• Red Hat Fedora 8: version 1.4.4 only; version 1.4.5 only; version 1.4.6 only; version 1.4.7 only; version 1.5. only; version 1.5.0 only; …

Published 2008-06-02. Last modified 2026-06-16.