CVE-2011-4028 in X Server
Summary
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
10/09/2011
Disclosure
07/03/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 61173 | X Server LockServer link following | 59 | Not defined | Official fix | CVE-2011-4028 |