The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and previous versions, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
systemd project systemd 31 |
||
systemd project systemd 30 |
||
systemd project systemd 29 |
||
systemd project systemd 28 |
||
systemd project systemd 14 |
||
systemd project systemd 13 |
||
systemd project systemd 12 |
||
systemd project systemd 11 |
||
opensuse opensuse 12.1 |
||
systemd project systemd |
||
systemd project systemd 36 |
||
systemd project systemd 23 |
||
systemd project systemd 22 |
||
systemd project systemd 21 |
||
systemd project systemd 20 |
||
systemd project systemd 19 |
||
systemd project systemd 6 |
||
systemd project systemd 5 |
||
systemd project systemd 4 |
||
systemd project systemd 3 |
||
systemd project systemd 34 |
||
systemd project systemd 32 |
||
systemd project systemd 27 |
||
systemd project systemd 25 |
||
systemd project systemd 18 |
||
systemd project systemd 16 |
||
systemd project systemd 9 |
||
systemd project systemd 7 |
||
systemd project systemd 2 |
||
systemd project systemd 35 |
||
systemd project systemd 33 |
||
systemd project systemd 26 |
||
systemd project systemd 24 |
||
systemd project systemd 17 |
||
systemd project systemd 15 |
||
systemd project systemd 10 |
||
systemd project systemd 8 |
||
systemd project systemd 1 |
Vulmon