PT-2013-4996 · Freedesktop.Org+2 · Policykit Local Authority+2
CVSS v2.0
5.9
Medium
| Vector | AV:L/AC:H/Au:N/C:C/I:C/A:P |
Name of the Vulnerable Software and Affected Versions
systemd (affected versions not specified)
Description
The issue allows local users in a specific group to modify the Xorg X11 Server configuration file and possibly gain privileges. This is achieved through the SetX11Keyboard function when PolicyKit Local Authority (PKLA) is used to change group permissions on the X Keyboard Extension (XKB) layouts description. The exploitation involves the use of special and control characters.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Incorrect Default Permissions
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Policykit Local Authority
Xorg-X11-Server
Systemd