CVE-2011-4028

2011-10-1800:00:00

ubuntu.com

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:H/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows
local users to determine the existence of arbitrary files via a symlink
attack on a temporary lock file, which is handled differently if the file
exists.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchxorg-server< 2:1.7.6-2ubuntu7.8UNKNOWN
ubuntu10.10noarchxorg-server< 2:1.9.0-0ubuntu7.5UNKNOWN
ubuntu11.04noarchxorg-server< 2:1.10.1-1ubuntu1.3UNKNOWN
ubuntu11.10noarchxorg-server< 2:1.10.4-1ubuntu4.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	xorg-server	< 2:1.7.6-2ubuntu7.8	UNKNOWN
ubuntu	10.10	noarch	xorg-server	< 2:1.9.0-0ubuntu7.5	UNKNOWN
ubuntu	11.04	noarch	xorg-server	< 2:1.10.1-1ubuntu1.3	UNKNOWN
ubuntu	11.10	noarch	xorg-server	< 2:1.10.4-1ubuntu4.1	UNKNOWN