CVE-2011-4028

LOW
CVSS v3
1.2CVSS v2
0.10% EPSS (exploit probability)
CWE-59CWE

Description

The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists.

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references