PT-2011-1035 · Acpid · Acpid
Oliver-Tobias Ripka
·
Publicado
2011-10-05
·
Atualizado
2013-10-28
·
CVE-2011-2777
CVSS v2.0
4.6
Média
| Vetor | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
acpid versions 2.0.16 and earlier
Description
The issue allows local users to gain privileges by exploiting incorrect usage of the pidof program in the powerbtn.sh script. This can be achieved by running a program with the name kded4 and setting a DBUS SESSION BUS ADDRESS environment variable containing commands. The vulnerability may lead to disruption of confidentiality, integrity, and availability of protected information. It can be exploited by a local attacker.
Recommendations
For acpid versions 2.0.16 and earlier, update to version 2.0.17 or later to resolve the issue. As a temporary workaround, consider restricting access to the powerbtn.sh script to minimize the risk of exploitation. Avoid using the DBUS SESSION BUS ADDRESS environment variable in a way that could contain commands until the issue is resolved.
Exploit
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Acpid