Lucene search
HistoryAug 29, 2012 - 10:55 p.m.
CVE-2011-2777
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
13.2%
samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows local users to gain privileges by running a program with the name kded4 and a DBUS_SESSION_BUS_ADDRESS environment variable containing commands.
Affected configurations
Node
tedfelixacpid2Range≤2.0.16
ORtedfelixacpid2Match2.0.0
ORtedfelixacpid2Match2.0.1
ORtedfelixacpid2Match2.0.2
ORtedfelixacpid2Match2.0.3
ORtedfelixacpid2Match2.0.4
ORtedfelixacpid2Match2.0.5
ORtedfelixacpid2Match2.0.6
ORtedfelixacpid2Match2.0.7
ORtedfelixacpid2Match2.0.8
ORtedfelixacpid2Match2.0.9
ORtedfelixacpid2Match2.0.10
ORtedfelixacpid2Match2.0.11
ORtedfelixacpid2Match2.0.12
ORtedfelixacpid2Match2.0.13
ORtedfelixacpid2Match2.0.14
ORtedfelixacpid2Match2.0.15
Related
cve
cve
CVE-2011-2777
2022-10-03 16:15:17
debiancve
debiancve
CVE-2011-2777
2022-10-03 16:15:17
prion
prion
Command injection
2012-08-29 22:55:00
exploitpack
exploitpack
ubuntucve
ubuntucve
CVE-2011-2777
2011-12-08 00:00:00
gentoo
gentoo
acpid2: Privilege escalation
2013-10-28 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201310-20
2015-09-29 00:00:00
Mandriva Update for acpid MDVSA-2012:137 (acpid)
2012-08-21 00:00:00
Ubuntu Update for acpid USN-1296-1
2011-12-09 00:00:00
seebug
seebug
Acpid 1:2.0.10-1ubuntu2 Privilege Boundary Crossing Vulnerability
2014-07-01 00:00:00
cvelist
cvelist
CVE-2011-2777
2022-10-03 16:15:17
nessus
nessus
GLSA-201310-20 : acpid2: Privilege escalation
2013-10-29 00:00:00
Mandriva Linux Security Advisory : acpid (MDVSA-2012:137)
2012-09-06 00:00:00
packetstorm
packetstorm
Acpid Privilege Boundary Crossing
2011-12-10 00:00:00
exploitdb
exploitdb
ubuntu
ubuntu
acpid vulnerabilities
2011-12-08 00:00:00
securityvulns
securityvulns
ACPI scripts privilege escalation
2011-12-12 00:00:00
[USN-1296-1] acpid vulnerabilities
2011-12-12 00:00:00
debian
debian
[SECURITY] [DSA 2362-1] acpid security update
2011-12-10 10:15:27
osv
osv
acpid - several
2011-12-10 00:00:00
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
13.2%
Related for NVD:CVE-2011-2777