What is CVE-2011-2777?

CVE-2011-2777 is a vulnerability in Tedfelix Acpid2, classified under CWE-264. Published 2012-08-29.

Is CVE-2011-2777 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Tedfelix Acpid2

CVE-2011-2777

samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows local users to gain privileges by running a program with the name kded4 and a DBUS_SESSION_BUS_ADDRESS environment variable containing commands.

EPSS: 0.006 (45.7th percentile) — read the EPSS interpretation.

Affected products

Tedfelix Acpid2 — versions 2.0.0, 2.0.1, 2.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

Snoopy-Sec/Localroot-ALL-CVE
nisadevi11/Localroot-ALL-CVE

References

cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2011-2777?: CVE-2011-2777 is a vulnerability in Tedfelix Acpid2, classified under CWE-264. Published 2012-08-29.
Is CVE-2011-2777 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.