CVE-2011-4613

Published: Feb 5, 2014Modified: Apr 29, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY.

Affected (7)

Products: Canonical: Ubuntu Linux · Debian: Debian Linux · Ubuntu: Linux · +1 more

Show all products

Canonical: Ubuntu Linux · Debian: Debian Linux · Ubuntu: Linux · X.org: X Server

1 product

1 product

1 product

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 10.10
Canonical Ubuntu Linux	Version 11.04
Canonical Ubuntu Linux	Version 11.10
Debian Debian Linux	All versions
Ubuntu Linux	All versions
X.org X Server	All versions