CVE-2011-4029
published 2012-07-03CVE-2011-4029: The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files…
low1.9CVSS 3.1
AVLACMAuNCPINAN
EXPLOIT
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service (removed execution permission) via a symlink attack on a temporary lock file.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | xorg-server | < xorg-server 2:1.11.1.901-2 (bookworm) | xorg-server 2:1.11.1.901-2 (bookworm) |
| x.org | x_server | <= 1.11.1 | — |
| x.org | x_server | — | — |
| x.org | xorg-server | >= 0 < 2:1.11.1.901-2 | 2:1.11.1.901-2 |
| x.org | xorg-server | >= 0 < 2:1.11.1.901-2 | 2:1.11.1.901-2 |
| x.org | xorg-server | >= 0 < 2:1.11.1.901-2 | 2:1.11.1.901-2 |
| x.org | xorg-server | >= 0 < 2:1.11.1.901-2 | 2:1.11.1.901-2 |
CVSS provenance
nvd1.9LOWAV:L/AC:M/Au:N/C:P/I:N/A:N
osv1.9LOW