PT-2013-1397 · Xfree86+2 · Xfree86+2

Josh Bressers · Publicado 2013-02-20 · Atualizado 2023-02-13 · CVE-2011-2504

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions XFree86 x11perf versions prior to 1.5.4

Description The issue allows local users to gain privileges through unspecified Trojan horse code in the current working directory due to an untrusted search path vulnerability in x11perfcomp.

Recommendations For versions prior to 1.5.4, update to version 1.5.4 or later to resolve the issue.

Correção

Identificadores relacionados

CESA-2013_0502

CVE-2011-2504

RHSA-2013:0502

RHSA-2013_0502

Produtos afetados

Centos

Red Hat

Xfree86

Referências · 38

• https://lists.centos.org/pipermail/centos-announce/2013-March/069081.html · Nota
• https://linux.oracle.com/errata/ELSA-2013-0502.html · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2013:0502 · Nota
• https://lists.centos.org/pipermail/centos-announce/2013-March/069079.html · Nota
• http://securityfocus.com/bid/58082 · Nota
• https://osv.dev/vulnerability/CVE-2011-2504 · Aviso do Fabricante
• https://lists.centos.org/pipermail/centos-cr-announce/2013-February/013636.html · Nota
• https://lists.centos.org/pipermail/centos-announce/2013-March/031644.html · Nota
• https://lists.centos.org/pipermail/centos-announce/2013-March/031642.html · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2504 · Aviso do Fabricante
• https://lists.centos.org/pipermail/centos-cr-announce/2013-February/027016.html · Nota
• https://rhn.redhat.com/errata/RHSA-2013-0502.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2504 · Nota de Segurança
• https://lists.centos.org/pipermail/centos-cr-announce/2013-February/006999.html · Nota
• https://lists.centos.org/pipermail/centos-announce/2013-March/069028.html · Nota