Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2011-4029
cve-2011-4029
x.org xserver
file permissions
symlink attack
denial of service
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service (removed execution permission) via a symlink attack on a temporary lock file.
Affected configurations
Node
x.orgx_serverRange≤1.11.1
ORx.orgx_serverMatch1.11.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| x.org:x_server | x.org x server | le | 1.11.1 |
| x.org:x_server | x.org x server | eq | 1.11.0 |
Related
debiancve
debiancve
CVE-2011-4029
2022-10-03 16:15:14
nvd
nvd
CVE-2011-4029
2012-07-03 19:55:01
packetstorm
packetstorm
Xorg Permission Change
2011-10-27 00:00:00
ubuntucve
ubuntucve
CVE-2011-4029
2011-10-18 00:00:00
CVE-2011-4613
2011-12-15 00:00:00
prion
prion
Design/Logic Flaw
2012-07-03 19:55:00
cvelist
cvelist
CVE-2011-4029
2022-10-03 16:15:14
freebsd
freebsd
Xorg server -- two vulnerabilities in X server lock handling code
2011-10-18 00:00:00
nessus
nessus
RHEL 6 : xorg-x11-server (RHSA-2012:0939)
2012-06-20 00:00:00
SuSE 11.1 Security Update : xorg-x11-server (SAT Patch Number 5479)
2011-12-13 00:00:00
CentOS 6 : xorg-x11-server (CESA-2012:0939)
2012-07-11 00:00:00
redhat
redhat
(RHSA-2012:0939) Low: xorg-x11-server security and bug fix update
2012-06-20 00:00:00
seebug
seebug
Xorg 1.4 to 1.11.2 File Permission Change PoC
2014-07-01 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2012-104)
2015-09-08 00:00:00
CentOS Update for xorg-x11-server-common CESA-2012:0939 centos6
2012-07-30 00:00:00
CentOS Update for xorg-x11-server-common CESA-2012:0939 centos6
2012-07-30 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:42:01
amazon
amazon
Low: xorg-x11-server
2012-07-05 16:24:00
exploitpack
exploitpack
X.Org xorg 1.4 1.11.2 - File Permission Change
2011-10-28 00:00:00
gentoo
gentoo
X.Org X Server: Multiple vulnerabilities
2011-10-22 00:00:00
suse
suse
xorg-x11-server (important)
2012-02-09 19:10:34
Security update for xorg-x11-server (important)
2011-12-02 08:08:16
centos
centos
xorg security update
2012-07-10 17:26:54
oraclelinux
oraclelinux
xorg-x11-server security and bug fix update
2012-06-27 00:00:00
exploitdb
exploitdb
X.Org xorg 1.4 < 1.11.2 - File Permission Change
2011-10-28 00:00:00
ubuntu
ubuntu
X.Org X server regression
2011-10-19 00:00:00
X.Org X server vulnerability
2011-10-20 00:00:00
X.Org X server vulnerabilities
2011-10-18 00:00:00
securityvulns
securityvulns
X.Org multiple security vulnerabilities
2011-10-20 00:00:00
[USN-1232-1] X.Org X server vulnerabilities
2011-10-20 00:00:00
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2011-4029