CVE

Id
51941  
CVE No.
CVE-2011-4029  
Status
Candidate  
Description
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service (removed execution permission) via a symlink attack on a temporary lock file.  
Phase
Assigned (20111009)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
556843 51941 CVE-2011-4029 MLIST:[xorg] 20111018 X.Org security advisory: xserver locking code issues  View
556844 51941 CVE-2011-4029 URL:http://lists.freedesktop.org/archives/xorg/2011-October/053680.html  View
556845 51941 CVE-2011-4029 CONFIRM:http://cgit.freedesktop.org/xorg/xserver/commit/?id=b67581cf825940fdf52bf2e0af4330e695d724a4  View
556846 51941 CVE-2011-4029 REDHAT:RHSA-2012:0939  View
556847 51941 CVE-2011-4029 URL:http://rhn.redhat.com/errata/RHSA-2012-0939.html  View
556848 51941 CVE-2011-4029 SECUNIA:46460  View
556849 51941 CVE-2011-4029 URL:http://secunia.com/advisories/46460  View
556850 51941 CVE-2011-4029 SECUNIA:49579  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32943 JVNDB-2011-003183 Steema TeeChart ActiveX コントロールにおけるバッファオーバーフローの脆弱性 Schneider Electric Vijeo Historian、Schneider Electric CitectHistorian、および Schneider Electric CitectSCADA Reports で使用される Steema TeeChart ActiveX コントロールには、バッファオーバーフローの脆弱性が存在します。 CVE-2011-4034 51941 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003183.html  View