CVE-2012-0871

Published Apr 18, 2014

Last updated 3 years ago

Overview

Description
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.
Source
secalert@redhat.com
NVD status
Analyzed

Risk scores

CVSS 2.0

Type
Primary
Base score
6.3
Impact score
9.2
Exploitability score
3.4
Vector string
AV:L/AC:M/Au:N/C:N/I:C/A:C

Weaknesses

nvd@nist.gov
CWE-59

Social media

Hype score
Not currently trending

Configurations