CVE-2011-4613

Published: 15 December 2011

The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY.

Notes

requires pty access. In combination with CVE-2011-4029 this becomes
more important, but that CVE is fixed in Ubuntu.

Debian fixed this by dropping support for alternate TTY devices,
which we need for upstart support. See changelog for
(1:7.4~2ubuntu2) and (1:7.4~4).

Status

References

• https://ubuntu.com/security/notices/USN-1349-1
• https://www.cve.org/CVERecord?id=CVE-2011-4613
• NVD
• Launchpad
• Debian

Bugs

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652249
• https://bugs.launchpad.net/ubuntu/+source/xorg/+bug/918332