CVE:CVE-2007-4074
CNNVD:CNNVD-200707-530
Speech Technology Research (CSTR) Festival 1.95 beta (又称2.0 beta)的中心默认设置在没有提交任何权限请求的情况下提升特权并在本地运行，这会允许见机行事的攻击者可以借助端口1314上的本地后台程序，执行任意指令。该漏洞不同于CVE-2001-0956。
solution:Upgrade centre_for_speech_technology_research gentoo_linux to a higher version than festival_1.95_beta,and avoid the version festival_1.95_beta; Upgrade suse suse_linux to a higher version than *