Lucene search
Ubuntu.comUB:CVE-2011-2777HistoryDec 08, 2011 - 12:00 a.m.
CVE-2011-2777
2011-12-0800:00:00
ubuntu.com
ubuntu.com
8
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
12.2%
samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses
the pidof program incorrectly, which allows local users to gain privileges
by running a program with the name kded4 and a DBUS_SESSION_BUS_ADDRESS
environment variable containing commands.
Bugs
Related
cve
cve
CVE-2011-2777
2012-08-29 22:55:00
prion
prion
Command injection
2012-08-29 22:55:00
debiancve
debiancve
CVE-2011-2777
2012-08-29 22:55:00
exploitpack
exploitpack
seebug
seebug
Acpid 1:2.0.10-1ubuntu2 Privilege Boundary Crossing Vulnerability
2014-07-01 00:00:00
nessus
nessus
GLSA-201310-20 : acpid2: Privilege escalation
2013-10-29 00:00:00
Mandriva Linux Security Advisory : acpid (MDVSA-2012:137)
2012-09-06 00:00:00
packetstorm
packetstorm
Acpid Privilege Boundary Crossing
2011-12-10 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201310-20
2015-09-29 00:00:00
Mandriva Update for acpid MDVSA-2012:137 (acpid)
2012-08-21 00:00:00
Ubuntu Update for acpid USN-1296-1
2011-12-09 00:00:00
gentoo
gentoo
acpid2: Privilege escalation
2013-10-28 00:00:00
exploitdb
exploitdb
securityvulns
securityvulns
ACPI scripts privilege escalation
2011-12-12 00:00:00
[USN-1296-1] acpid vulnerabilities
2011-12-12 00:00:00
ubuntu
ubuntu
acpid vulnerabilities
2011-12-08 00:00:00
debian
debian
[SECURITY] [DSA 2362-1] acpid security update
2011-12-10 10:30:09
osv
osv
acpid - several
2011-12-10 00:00:00
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
12.2%
Related for UB:CVE-2011-2777