CVE-2005-0072

CVE-2005-0072 describes a privilege escalation vulnerability in zhcon versions prior to 0.2, where the application fails to drop privileges before reading user configuration files. This flaw allows local users to read arbitrary files on the system. With a CVSS score of 2.1, this is a low-severity vulnerability requiring local access (AV:L) with low attack complexity (AC:L), primarily impacting confidentiality (C:P) by enabling unauthorized file disclosure. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB, though the vulnerability has garnered some community discussion.