Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-2777HistoryAug 29, 2012 - 10:55 p.m.
CVE-2011-2777
2012-08-2922:55:00
Debian Security Bug Tracker
security-tracker.debian.org
14
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
12.3%
samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows local users to gain privileges by running a program with the name kded4 and a DBUS_SESSION_BUS_ADDRESS environment variable containing commands.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | acpid | < 1:2.0.14-1 | acpid_1:2.0.14-1_all.deb |
| Debian | 11 | all | acpid | < 1:2.0.14-1 | acpid_1:2.0.14-1_all.deb |
| Debian | 10 | all | acpid | < 1:2.0.14-1 | acpid_1:2.0.14-1_all.deb |
| Debian | 999 | all | acpid | < 1:2.0.14-1 | acpid_1:2.0.14-1_all.deb |
| Debian | 13 | all | acpid | < 1:2.0.14-1 | acpid_1:2.0.14-1_all.deb |
Related
cve
cve
CVE-2011-2777
2012-08-29 22:55:00
prion
prion
Command injection
2012-08-29 22:55:00
ubuntucve
ubuntucve
CVE-2011-2777
2011-12-08 00:00:00
exploitpack
exploitpack
seebug
seebug
Acpid 1:2.0.10-1ubuntu2 Privilege Boundary Crossing Vulnerability
2014-07-01 00:00:00
nessus
nessus
GLSA-201310-20 : acpid2: Privilege escalation
2013-10-29 00:00:00
Mandriva Linux Security Advisory : acpid (MDVSA-2012:137)
2012-09-06 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201310-20
2015-09-29 00:00:00
Ubuntu Update for acpid USN-1296-1
2011-12-09 00:00:00
Mandriva Update for acpid MDVSA-2012:137 (acpid)
2012-08-21 00:00:00
packetstorm
packetstorm
Acpid Privilege Boundary Crossing
2011-12-10 00:00:00
gentoo
gentoo
acpid2: Privilege escalation
2013-10-28 00:00:00
exploitdb
exploitdb
securityvulns
securityvulns
ACPI scripts privilege escalation
2011-12-12 00:00:00
[USN-1296-1] acpid vulnerabilities
2011-12-12 00:00:00
ubuntu
ubuntu
acpid vulnerabilities
2011-12-08 00:00:00
osv
osv
acpid - several
2011-12-10 00:00:00
debian
debian
[SECURITY] [DSA 2362-1] acpid security update
2011-12-10 10:30:09
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
12.3%
Related for DEBIANCVE:CVE-2011-2777