Full Disclosure mailing list archives
Xorg file permission change PoC (CVE-2011-4029)
From: vladz <vladz () devzero fr>
Date: Thu, 27 Oct 2011 17:48:44 +0200
Hi list, A couple of weeks ago, I found a permission change vulnerability in the way that Xorg handled its lock files. Once exploited, it allowed a local user to modify the file permissions of an arbitrary file to 444 (read for all). It has been assigned CVE-2011-4029, X.org released a patch on 2011/10/18, and now, I though I could share the vulnerability description and its original PoC. http://vladz.devzero.fr/Xorg-CVE-2011-4029.txt -- http://vladz.devzero.fr PGP key 8F7E2D3C from pgp.mit.edu _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Xorg file permission change PoC (CVE-2011-4029) vladz (Oct 27)