CVE-2009-4033

Publication date 8 December 2009

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

A certain Red Hat patch for acpid 1.0.4 effectively triggers a call to the open function with insufficient arguments, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file, cause a denial of service by overwriting this file, or gain privileges by executing this file.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
acpid 9.10 karmic
Not affected
9.04 jaunty
Not affected
8.10 intrepid
Not affected
8.04 LTS hardy
Not affected
6.06 LTS dapper Ignored end of life