CVE-2011-4029: Race Condition
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service (removed execution permission) via a symlink attack on a temporary lock file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4029?
CVE-2011-4029 has been rated as a medium severity vulnerability due to its potential for local denial of service and permission manipulation.
How do I fix CVE-2011-4029?
To mitigate CVE-2011-4029, update the X.Org xserver to version 1.11.2 or later, which contains the necessary patch.
Who is affected by CVE-2011-4029?
Local users on systems running vulnerable versions of the X.Org xserver, specifically versions before 1.11.2, are at risk from CVE-2011-4029.
What kind of attack does CVE-2011-4029 facilitate?
CVE-2011-4029 facilitates a symlink attack that could change file permissions and lead to the denial of service.
Is CVE-2011-4029 easy to exploit?
CVE-2011-4029 can be exploited by local users with knowledge of symlink manipulation, making it relatively easy to exploit in the right conditions.