Vulnerabilities > X ORG > X Server > Low

DATE CVE VULNERABILITY TITLE RISK
2012-07-03 CVE-2011-4028 Link Following vulnerability in X.Org X Server
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists.
local
high complexity
x-org CWE-59
1.2
2012-07-03 CVE-2011-4029 Race Condition vulnerability in X.Org X Server
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service (removed execution permission) via a symlink attack on a temporary lock file.
local
x-org CWE-362
1.9