Lucene search

K
ubuntuUbuntuUSN-1107-1
HistoryApr 06, 2011 - 12:00 a.m.

x11-xserver-utils vulnerability

2011-04-0600:00:00
ubuntu.com
31

9.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.022 Low

EPSS

Percentile

89.3%

Releases

  • Ubuntu 10.10
  • Ubuntu 10.04
  • Ubuntu 9.10
  • Ubuntu 8.04

Packages

  • x11-xserver-utils - X server utilities

Details

Sebastian Krahmer discovered that the xrdb utility incorrectly filtered
crafted hostnames. An attacker could use this flaw with a malicious
DHCP server or with a remote xdmcp login and execute arbitrary code,
resulting in root privilege escalation.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchx11-xserver-utils< 7.4+2ubuntu3.1UNKNOWN
Ubuntu8.04noarchx11-xserver-utils< 7.3+2ubuntu0.1UNKNOWN
Ubuntu10.10noarchx11-xserver-utils< 7.5+2ubuntu1.1UNKNOWN
Ubuntu10.04noarchx11-xserver-utils< 7.5+1ubuntu2.1UNKNOWN

9.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.022 Low

EPSS

Percentile

89.3%