CVE

Id
51940  
CVE No.
CVE-2011-4028  
Status
Candidate  
Description
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists.  
Phase
Assigned (20111009)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
556835 51940 CVE-2011-4028 MLIST:[xorg] 20111018 X.Org security advisory: xserver locking code issues  View
556836 51940 CVE-2011-4028 URL:http://lists.freedesktop.org/archives/xorg/2011-October/053680.html  View
556837 51940 CVE-2011-4028 CONFIRM:http://cgit.freedesktop.org/xorg/xserver/commit/?id=6ba44b91e37622ef8c146d8f2ac92d708a18ed34  View
556838 51940 CVE-2011-4028 REDHAT:RHSA-2012:0939  View
556839 51940 CVE-2011-4028 URL:http://rhn.redhat.com/errata/RHSA-2012-0939.html  View
556840 51940 CVE-2011-4028 SECUNIA:46460  View
556841 51940 CVE-2011-4028 URL:http://secunia.com/advisories/46460  View
556842 51940 CVE-2011-4028 SECUNIA:49579  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32942 JVNDB-2011-003182 Steema TeeChart ActiveX コントロールにおけるバッファオーバーフローの脆弱性 Schneider Electric Vijeo Historian、Schneider Electric CitectHistorian、および Schneider Electric CitectSCADA Reports で使用される Steema TeeChart ActiveX コントロールには、バッファオーバーフローの脆弱性が存在します。 CVE-2011-4033 51940 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003182.html  View