X.Org X11 File Read Permission Information Disclosure Vulnerability
BID:50196
Info
X.Org X11 File Read Permission Information Disclosure Vulnerability
| Bugtraq ID: | 50196 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-4029 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 18 2011 12:00AM |
| Updated: | Jul 03 2012 08:40AM |
| Credit: | Vladz |
| Vulnerable: |
X.org xorg-server 1.4.1 X.org xorg-server 1.1.1 X.org xorg-server 1.4 X.org xorg-server 1.3.99.2 (RC2) X.org xorg-server 1.2 X.org xorg-server 1.02-r5 X.org xorg-server 1.0.2-r6 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Server for VMware 11 SP1 SuSE SUSE Linux Enterprise Server 11 SP1 SuSE SUSE Linux Enterprise SDK 11 SP1 SuSE SUSE Linux Enterprise Desktop 11 SP1 SuSE openSUSE 11.3 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 |
| Not Vulnerable: | |
Discussion
X.Org X11 File Read Permission Information Disclosure Vulnerability
X.Org X11 is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data.
A local attacker can exploit this issue to gain read permissions of local files. Information obtained may aid in further attacks.
X.Org X11 is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data.
A local attacker can exploit this issue to gain read permissions of local files. Information obtained may aid in further attacks.
Exploit / POC
X.Org X11 File Read Permission Information Disclosure Vulnerability
Attackers require local interactive access to exploit.
The following example is available:
Attackers require local interactive access to exploit.
The following example is available:
Solution / Fix
X.Org X11 File Read Permission Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
X.Org X11 File Read Permission Information Disclosure Vulnerability
References:
References:
- X.Org Homepage (X.Org)
- X.Org security advisory: xserver locking code issues (Matthieu Herrb)
- Xorg permission change vulnerability (CVE-2011-4029) (vlad)