CVE-2011-4029

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2011-4029

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2011-4029.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2011-4029

Downstream

DEBIAN-CVE-2011-4029

RHSA-2012:0939

Published

2012-07-03T19:55:01Z

Modified

2025-08-09T19:01:28Z

Summary

[none]

Details

The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service (removed execution permission) via a symlink attack on a temporary lock file.

References

http://rhn.redhat.com/errata/RHSA-2012-0939.html
http://secunia.com/advisories/46460
http://secunia.com/advisories/49579
http://cgit.freedesktop.org/xorg/xserver/commit/?id=b67581cf825940fdf52bf2e0af4330e695d724a4
http://lists.freedesktop.org/archives/xorg/2011-October/053680.html

CVE-2011-4029

Affected packages