CVEvulnerability

CVE-2011-2777

4.4 MEDIUM Published 2012-08-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-08-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264

Description

samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows local users to gain privileges by running a program with the name kded4 and a DBUS_SESSION_BUS_ADDRESS environment variable containing commands.

Affected configurations

• tedfelix acpid2 (<= 2.0.16) • tedfelix acpid2 2.0.0 • tedfelix acpid2 2.0.1 • tedfelix acpid2 2.0.2 • tedfelix acpid2 2.0.3 • tedfelix acpid2 2.0.4 • tedfelix acpid2 2.0.5 • tedfelix acpid2 2.0.6 • tedfelix acpid2 2.0.7 • tedfelix acpid2 2.0.8 • tedfelix acpid2 2.0.9 • tedfelix acpid2 2.0.10 • tedfelix acpid2 2.0.11 • tedfelix acpid2 2.0.12 • tedfelix acpid2 2.0.13 • tedfelix acpid2 2.0.14 • tedfelix acpid2 2.0.15

Related

Weakness · not in database (1)

References