Vulnerability in X.org X_server

CVE-2011-4613

The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file tha…

EPSS: 0.009 (54.6th percentile) — read the EPSS interpretation.

Affected products

X.org X_server
Canonical Ubuntu_linux — versions 10.04, 10.10, 11.04
Debian Debian_linux
Ubuntu Linux
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

secalert@redhat.com (x_refsource_MISC, Vendor Advisory)
secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, Vendor Advisory)
secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN, Vendor Advisory)