CVE:CVE-2009-1573
CNNVD:CNNVD-200905-077
xvfb-run是一个运行在一个虚拟X服务器环境下的X客户机或命令。             
Debian GNU/Linux,Ubuntu,Fedora 10,以及其他操作系统中的xvfb-run 1.6.1把magic cookie (MCOOKIE)放在命令行上，这会允许本地用户通过列出程序和它的自变量，获得特权。
solution:Upgrade debian debian_linux to a higher version than *; Upgrade redhat fedora to a higher version than 10,and avoid the version 10; Upgrade ubuntu linux to a higher version than *; Upgrade branden_robinson xvfb-run to a higher version than 1.6.1,and avoid the version 1.6.1