Lucene search
PRIOn knowledge basePRION:CVE-2011-4613HistoryFeb 05, 2014 - 7:55 p.m.
Design/Logic Flaw
2014-02-0519:55:00
PRIOn knowledge base
www.prio-n.com
3
6.6 Medium
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.4%
The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 10.10 | |
| ubuntu_linux | eq | 11.04 | |
| ubuntu_linux | eq | 11.10 | |
| ubuntu_linux | eq | 10.4 lts |
Related
nessus
nessus
Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : xorg vulnerability (USN-1349-1)
2012-01-27 00:00:00
Debian DSA-2364-1 : xorg - incorrect permission check
2012-01-12 00:00:00
debian
debian
[SECURITY] [DSA 2364-1] xorg security update
2011-12-18 20:03:08
securityvulns
securityvulns
X.Org privilege escalation
2012-02-08 00:00:00
[USN-1349-1] X.Org vulnerability
2012-02-08 00:00:00
cvelist
cvelist
CVE-2011-4613
2014-02-05 19:00:00
debiancve
debiancve
CVE-2011-4613
2014-02-05 19:55:00
openvas
openvas
Ubuntu: Security Advisory (USN-1349-1)
2012-02-01 00:00:00
Debian Security Advisory DSA 2364-1 (xorg)
2012-02-11 00:00:00
Ubuntu Update for xorg USN-1349-1
2012-02-01 00:00:00
ubuntu
ubuntu
X.Org vulnerability
2012-01-26 00:00:00
cve
cve
CVE-2011-4613
2014-02-05 19:55:00
exploitpack
exploitpack
X.Org xorg 1.4 1.11.2 - File Permission Change
2011-10-28 00:00:00
seebug
seebug
Xorg 1.4 to 1.11.2 File Permission Change PoC
2014-07-01 00:00:00
ubuntucve
ubuntucve
CVE-2011-4613
2011-12-15 00:00:00
exploitdb
exploitdb
X.Org xorg 1.4 < 1.11.2 - File Permission Change
2011-10-28 00:00:00
6.6 Medium
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.4%
Related for PRION:CVE-2011-4613