Description
samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows local users to gain privileges by running a program with the name kded4 and a DBUS_SESSION_BUS_ADDRESS environment variable containing commands.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2362-1 | acpid security update |
EUVD |
EUVD-2011-2751 | samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows local users to gain privileges by running a program with the name kded4 and a DBUS_SESSION_BUS_ADDRESS environment variable containing commands. |
Ubuntu USN |
USN-1296-1 | acpid vulnerabilities |
References
| Link | Providers |
|---|---|
| https://bugs.launchpad.net/ubuntu/+source/acpid/+bug/893821 |
|
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-09-17T04:18:48.168Z
Reserved: 2011-07-19T00:00:00.000Z
Link: CVE-2011-2777
No data.
Status : Modified
Published: 2012-08-29T22:55:01.160
Modified: 2026-04-29T01:13:23.040
Link: CVE-2011-2777
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD
Ubuntu USN