CVEvulnerability

CVE-2012-0871

6.3 MEDIUM Published 2014-04-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2014-04-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.3 MEDIUM — AV:L/AC:M/Au:N/C:N/I:C/A:C
Weaknesses
CWE-59

Description

The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.

Affected configurations

• systemd project systemd (<= 037) • systemd project systemd 1 • systemd project systemd 2 • systemd project systemd 3 • systemd project systemd 4 • systemd project systemd 5 • systemd project systemd 6 • systemd project systemd 7 • systemd project systemd 8 • systemd project systemd 9 • systemd project systemd 10 • systemd project systemd 11 • systemd project systemd 12 • systemd project systemd 13 • systemd project systemd 14 • systemd project systemd 15 • systemd project systemd 16 • systemd project systemd 17 • systemd project systemd 18 • systemd project systemd 19 • systemd project systemd 20 • systemd project systemd 21 • systemd project systemd 22 • systemd project systemd 23 • systemd project systemd 24 • systemd project systemd 25 • systemd project systemd 26 • systemd project systemd 27 • systemd project systemd 28 • systemd project systemd 29 • systemd project systemd 30 • systemd project systemd 31 • systemd project systemd 32 • systemd project systemd 33 • systemd project systemd 34 • systemd project systemd 35 • systemd project systemd 36 • opensuse opensuse 12.1

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References