PT-2011-1035 · Acpid · Acpid

Oliver-Tobias Ripka · Published 2011-10-05 · Updated 2013-10-28 · CVE-2011-2777

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions acpid versions 2.0.16 and earlier

Description The issue allows local users to gain privileges by exploiting incorrect usage of the pidof program in the powerbtn.sh script. This can be achieved by running a program with the name kded4 and setting a DBUS SESSION BUS ADDRESS environment variable containing commands. The vulnerability may lead to disruption of confidentiality, integrity, and availability of protected information. It can be exploited by a local attacker.

Recommendations For acpid versions 2.0.16 and earlier, update to version 2.0.17 or later to resolve the issue. As a temporary workaround, consider restricting access to the powerbtn.sh script to minimize the risk of exploitation. Avoid using the DBUS SESSION BUS ADDRESS environment variable in a way that could contain commands until the issue is resolved.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

CWE-264

Related Identifiers

BDU:2015-02177

BDU:2015-09704

CVE-2011-2777

Affected Products

Acpid

References · 13

• 🔥 https://exploit-db.com/exploits/18228 · Exploit
• https://osv.dev/vulnerability/CVE-2011-2777 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2777 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2777 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-2777 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2011-2777 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1159 · Security Note
• https://bdu.fstec.ru/vul/2015-09704 · Security Note
• https://bdu.fstec.ru/vul/2015-02177 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4578 · Security Note
• http://debian.org/security/dsa-2362 · Note
• https://bugs.launchpad.net/ubuntu/+source/acpid/+bug/893821 · Note
• http://security.gentoo.org/glsa/glsa-201310-20.xml · Note