CVE-2011-4613
The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY.
- Score
- CVSS 2.0 4.6 Medium
- Status
- Modified - secalert@redhat.com
- Published
- 2014-02-05
- Last modified
- 2024-08-07
- Weaknesses
- CWE-264
Affected products
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652249
- http://www.debian.org/security/2011/dsa-2364
- http://www.ubuntu.com/usn/USN-1349-1
