Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4029
HistoryOct 18, 2011 - 12:00 a.m.

CVE-2011-4029

2011-10-1800:00:00
ubuntu.com
ubuntu.com
13

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%

The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows
local users to change the permissions of arbitrary files to 444, read those
files, and possibly cause a denial of service (removed execution
permission) via a symlink attack on a temporary lock file.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchxorg-server< 2:1.7.6-2ubuntu7.8UNKNOWN
ubuntu10.10noarchxorg-server< 2:1.9.0-0ubuntu7.5UNKNOWN
ubuntu11.04noarchxorg-server< 2:1.10.1-1ubuntu1.3UNKNOWN
ubuntu11.10noarchxorg-server< 2:1.10.4-1ubuntu4.1UNKNOWN

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%