PT-2014-2209
CVE-2012-0871
·
تاريخ النشر
2014-04-18
·
تاريخ التحديث
2022-01-28
الوصف من
CVSS 2.0
6.3
متوسطةالمقاييسAV:L/AC:M/Au:N/C:N/I:C/A:C
Name of the Vulnerable Software and Affected Versions
systemd versions prior to 37
Description
The issue allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/. This is due to a problem in the session link x11 socket function in login/logind-session.c in systemd-logind.
Recommendations
For versions prior to 37, update to version 37 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾