1.2
CVSSv2

CVE-2011-4028

Published: 03/07/2012 Updated: 24/08/2020
CVSS v2 Base Score: 1.2 | Impact Score: 2.9 | Exploitability Score: 1.9
VMScore: 107
Vector: AV:L/AC:H/Au:N/C:P/I:N/A:N

Vulnerability Summary

The LockServer function in os/utils.c in X.Org xserver prior to 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists.

Vulnerable Product Search on Vulmon Subscribe to Product

x.org x server

x.org x server 1.11.0

Vendor Advisories

Synopsis Low: xorg-x11-server security and bug fix update Type/Severity Security Advisory: Low Topic Updated xorg-x11-server packages that fix two security issues and severalbugs are now available for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having lowsecurity i ...
Synopsis Low: xorg-x11-server security and bug fix update Type/Severity Security Advisory: Low Topic Updated xorg-x11-server packages that fix one security issue and variousbugs are now available for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having lowsecurity im ...
The X server could be made to crash, run programs as an administrator, or read arbitrary files ...
The X server could be made to crash or run programs as an administrator ...
USN-1232-1 caused a regression with GLX support ...
A flaw was found in the way the XOrg server handled lock files A local user with access to the system console could use this flaw to determine the existence of a file in a directory not accessible to the user, via a symbolic link attack (CVE-2011-4028) A race condition was found in the way the XOrg server managed temporary lock files A local a ...