medium4.4Public exploit code
CVE-2011-2777
samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows local users to gain privileges by runnin…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Acpid 1:2.0.10-1ubuntu2 (Ubuntu 11.04/11.10) - Boundary Crossing Privilege Escalation2011-12-10 · local · linux
Impact
samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows local users to gain privileges by running a program with the name kded4 and a DBUS_SESSION_BUS_ADDRESS environment variable containing commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tedfelix | Acpid2 | through 2.0.16 Versions 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4 |