PT-2013-1397 · Xfree86+2 · Xfree86+2

Josh Bressers · Published 2013-02-20 · Updated 2023-02-13 · CVE-2011-2504

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions XFree86 x11perf versions prior to 1.5.4

Description The issue allows local users to gain privileges through unspecified Trojan horse code in the current working directory due to an untrusted search path vulnerability in x11perfcomp.

Recommendations For versions prior to 1.5.4, update to version 1.5.4 or later to resolve the issue.

Fix

Related Identifiers

CESA-2013_0502

CVE-2011-2504

RHSA-2013:0502

RHSA-2013_0502

Affected Products

Centos

Red Hat

Xfree86

References · 38

• https://linux.oracle.com/errata/ELSA-2013-0502.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-2504 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2504 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2504 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2504 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-0502.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-2504 · Vendor Advisory
• https://lists.centos.org/pipermail/centos-announce/2013-March/069081.html · Note
• https://access.redhat.com/errata/RHSA-2013:0502 · Note
• https://lists.centos.org/pipermail/centos-announce/2013-March/069079.html · Note
• http://securityfocus.com/bid/58082 · Note
• https://lists.centos.org/pipermail/centos-cr-announce/2013-February/013636.html · Note
• https://lists.centos.org/pipermail/centos-announce/2013-March/031644.html · Note
• https://lists.centos.org/pipermail/centos-announce/2013-March/031642.html · Note
• https://lists.centos.org/pipermail/centos-cr-announce/2013-February/027016.html · Note