CVE search · CVE-2011-4613
CVE-2011-4613
medium 4.6
The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY.
Details
- Status
- Modified
- Published
- Last changed
- Source
- secalert@redhat.com
- Weakness
- CWE-264
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 2.0 | medium 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652249Vendor Advisory
- http://www.debian.org/security/2011/dsa-2364Vendor Advisory
- http://www.ubuntu.com/usn/USN-1349-1Vendor Advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652249Vendor Advisory
- http://www.debian.org/security/2011/dsa-2364Vendor Advisory
- http://www.ubuntu.com/usn/USN-1349-1Vendor Advisory