CVE-2011-4578

Published: 6 December 2011

event.c in acpid (aka acpid2) before 2.0.11 does not have an appropriate umask setting during execution of event-handler scripts, which might allow local users to (1) perform write operations within directories created by a script, or (2) read files created by a script, via standard filesystem system calls.

Status

References

• http://www.openwall.com/lists/oss-security/2011/12/06/2
• https://ubuntu.com/security/notices/USN-1296-1
• https://www.cve.org/CVERecord?id=CVE-2011-4578
• NVD
• Launchpad
• Debian