Vulnerability in X.org X Server
CVE-2011-4613
The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY.
EPSS: 0.009 (56.2th percentile) — read the EPSS interpretation.
Affected products
- X.org X_server
- Canonical Ubuntu_linux — versions 10.04, 10.10, 11.04
- Debian Debian_linux
- Ubuntu Linux
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_MISC, Vendor Advisory)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN, Vendor Advisory)