CVE-2011-2504

2013-03-0822:55:01

redhat

web.nvd.nist.gov

cve

2011

2504

untrusted search path

vulnerability

x11perfcomp

xfree86

local users

privileges

trojan horse code

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory.

Affected configurations

Nvd

Node

xfree86x11perfRange≤1.5.3

xfree86x11perfMatch1.5

xfree86x11perfMatch1.5.1

xfree86x11perfMatch1.5.2

VendorProductVersionCPE
xfree86x11perf*cpe:2.3:a:xfree86:x11perf:*:*:*:*:*:*:*:*
xfree86x11perf1.5cpe:2.3:a:xfree86:x11perf:1.5:*:*:*:*:*:*:*
xfree86x11perf1.5.1cpe:2.3:a:xfree86:x11perf:1.5.1:*:*:*:*:*:*:*
xfree86x11perf1.5.2cpe:2.3:a:xfree86:x11perf:1.5.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
xfree86	x11perf	*	cpe:2.3:a:xfree86:x11perf::::::::
xfree86	x11perf	1.5	cpe:2.3:a:xfree86:x11perf:1.5:::::::*
xfree86	x11perf	1.5.1	cpe:2.3:a:xfree86:x11perf:1.5.1:::::::*
xfree86	x11perf	1.5.2	cpe:2.3:a:xfree86:x11perf:1.5.2:::::::*