high7.8
CVE-2011-2922
ktsuss versions 1.4 and prior spawns the GTK interface to run as root.
Impact
ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTK_MODULES" environment variable to possibly execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ktsuss Project | Ktsuss | through 1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/security/cve/cve-2011-2922
- https://lwn.net/Articles/477678/
- https://packetstormsecurity.com/files/109154/Gentoo-Linux-Security-Advisory-201201-15.html
- https://packetstormsecurity.com/files/cve/CVE-2011-2922
- https://security-tracker.debian.org/tracker/CVE-2011-2922
- https://snyk.io/vuln/SNYK-LINUX-KTSUSS-174466
- https://www.securityfocus.com/bid/49151
- https://access.redhat.com/security/cve/cve-2011-2922
- https://lwn.net/Articles/477678/
- https://packetstormsecurity.com/files/109154/Gentoo-Linux-Security-Advisory-201201-15.html
- https://packetstormsecurity.com/files/cve/CVE-2011-2922
- https://security-tracker.debian.org/tracker/CVE-2011-2922
- https://snyk.io/vuln/SNYK-LINUX-KTSUSS-174466
- https://www.securityfocus.com/bid/49151