Learning – Wizkid Blogs

13 Posts

Demultiplexing And How It Works

CVE-2011-0703 (debian_linux, gksu-polkit)
In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrator X11 session.
CVE-2011-2726 (debian_linux, drupal, enterprise_linux, fedora)
An access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the ability to attach File upload fields to any entity type in the system or has the ability to point individual File upload fields to the private file directory in comments, and the parent node is denied access, non-privileged users can still download the file attached t […]
CVE-2011-3349 (lightdm)
lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation.