medium4.6Public exploit code
CVE-2011-4613
The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local u…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- X.Org xorg 1.4 < 1.11.2 - File Permission Change2011-10-28 · local · linux
Impact
The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| X.Org | X Server | All versions |
| Canonical | Ubuntu Linux | Versions 10.04, 10.10, 11.04, 11.10 |
| Debian | Debian Linux | All versions |
| Ubuntu | Linux | All versions |