Vulnerability in Xfree86 Project X Server
CVE-2001-1409
dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or create files in the root file system.
EPSS: 0.004 (30.9th percentile) — read the EPSS interpretation.
Affected products
- Xfree86_project Xfree86_x_server — versions 4.1.0.2
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)