CVE-2011-2777

Published: Aug 29, 2012Modified: Apr 29, 2026

4.4

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 3.4 / Impact: 6.4

Source: NVD

Description

samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows local users to gain privileges by running a program with the name kded4 and a DBUS_SESSION_BUS_ADDRESS environment variable containing commands.

Affected (17)

Products: Tedfelix: Acpid2

Tedfelix

1 product

Acpid2

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Tedfelix Acpid2	Up to 2.0.16
Tedfelix Acpid2	Version 2.0.0
Tedfelix Acpid2	Version 2.0.10
Tedfelix Acpid2	Version 2.0.11
Tedfelix Acpid2	Version 2.0.12
Tedfelix Acpid2	Version 2.0.13
Tedfelix Acpid2	Version 2.0.14
Tedfelix Acpid2	Version 2.0.15
Tedfelix Acpid2	Version 2.0.1
Tedfelix Acpid2	Version 2.0.2
Tedfelix Acpid2	Version 2.0.3
Tedfelix Acpid2	Version 2.0.4
Tedfelix Acpid2	Version 2.0.5
Tedfelix Acpid2	Version 2.0.6
Tedfelix Acpid2	Version 2.0.7
Tedfelix Acpid2	Version 2.0.8
Tedfelix Acpid2	Version 2.0.9

Related CWEs

CWE-264

References (2)

https://bugs.launchpad.net/ubuntu/+source/acpid/+bug/893821

Source: cve@mitre.org

https://bugs.launchpad.net/ubuntu/+source/acpid/+bug/893821

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.