Link following in systemd and Opensuse - CVE-2012-0871
Published: April 18, 2014 / Updated: August 10, 2020
Vulnerability identifier: #VU41789
CSH Severity: High
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2012-0871
CWE-ID: CWE-59
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Freedesktop.org
SUSE
SUSE
Affected software:
systemd
Opensuse
systemd
Opensuse
Detailed vulnerability description
The vulnerability allows a remote non-authenticated attacker to #BASIC_IMPACT#.
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.
How to mitigate CVE-2012-0871
Install update from vendor's website.