Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201310-20
HistoryOct 28, 2013 - 12:00 a.m.

acpid2: Privilege escalation

2013-10-2800:00:00
Gentoo Foundation
security.gentoo.org
20

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.3%

JSON

Background

acpid2 is a daemon for Advanced Configuration and Power Interface.

Description

acpid2 does not properly use the pidof program in powerbtn.sh.

Impact

A local attacker could gain escalated privileges.

Workaround

There is no known workaround at this time.

Resolution

All acpid2 users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sys-power/acpid-2.0.17"
OSVersionArchitecturePackageVersionFilename
Gentooanyallsys-power/acpid< 2.0.17UNKNOWN

Related

cve 1
debiancve 1
prion 1
ubuntucve 1
exploitpack 1
seebug 1
nessus 4
packetstorm 1
openvas 7
exploitdb 1
securityvulns 2
ubuntu 1
osv 1
debian 1
cve
cve
CVE-2011-2777
2012-08-29 22:55:00
debiancve
debiancve
CVE-2011-2777
2012-08-29 22:55:00
prion
prion
Command injection
2012-08-29 22:55:00
ubuntucve
ubuntucve
CVE-2011-2777
2011-12-08 00:00:00
exploitpack
exploitpack
Acpid 1:2.0.10-1ubuntu2 (Ubuntu 11.0411.10) - Boundary Crossing Privilege Escalation
2011-12-10 00:00:00
seebug
seebug
Acpid 1:2.0.10-1ubuntu2 Privilege Boundary Crossing Vulnerability
2014-07-01 00:00:00
nessus
nessus
GLSA-201310-20 : acpid2: Privilege escalation
2013-10-29 00:00:00
Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : acpid vulnerabilities (USN-1296-1)
2011-12-09 00:00:00
Mandriva Linux Security Advisory : acpid (MDVSA-2012:137)
2012-09-06 00:00:00
packetstorm
packetstorm
Acpid Privilege Boundary Crossing
2011-12-10 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201310-20
2015-09-29 00:00:00
Ubuntu Update for acpid USN-1296-1
2011-12-09 00:00:00
Mandriva Update for acpid MDVSA-2012:137 (acpid)
2012-08-21 00:00:00
exploitdb
exploitdb
Acpid 1:2.0.10-1ubuntu2 (Ubuntu 11.04/11.10) - Boundary Crossing Privilege Escalation
2011-12-10 00:00:00
securityvulns
securityvulns
ACPI scripts privilege escalation
2011-12-12 00:00:00
[USN-1296-1] acpid vulnerabilities
2011-12-12 00:00:00
ubuntu
ubuntu
acpid vulnerabilities
2011-12-08 00:00:00
osv
osv
acpid - several
2011-12-10 00:00:00
debian
debian
[SECURITY] [DSA 2362-1] acpid security update
2011-12-10 10:30:09

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.3%

JSON
Related for GLSA-201310-20
cve1debiancve1prion1ubuntucve1exploitpack1seebug1nessus4packetstorm1openvas7exploitdb1securityvulns2ubuntu1osv1debian1