Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to     gain privileges via unspecified Trojan horse code in the current working directory. (CVE-2011-2504)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0502 advisory.

    - x11perf 1.5.4 (CVE-2011-2504)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It was found that the x11perfcomp utility included the current working directory in its PATH environment variable. Running x11perfcomp in an attacker- controlled directory would cause arbitrary code execution with the privileges of the user running x11perfcomp. (CVE-2011-2504)

Also with this update, the xorg-x11-utils and xorg-x11-server-utils packages have been upgraded to upstream version 7.5, and the xorg-x11-apps package to upstream version 7.6, which provides a number of bug fixes and enhancements over the previous versions.

*xorg ABI change With this update there is a change in the X.org ABI for the video drivers. This change will require compatible drivers.
Anyone using the drivers shipped with SL should have no problems.
Anyone using drivers from an external source - such as nVidia, ATI, or ELRepo should ensure a compatible driver is loaded. Please ensure you are on the most recent compatible driver before updating the system.
--

Updated core client packages for the X Window System that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The Core X11 clients packages provide the xorg-x11-utils, xorg-x11-server-utils, and xorg-x11-apps clients that ship with the X Window System.

It was found that the x11perfcomp utility included the current working directory in its PATH environment variable. Running x11perfcomp in an attacker-controlled directory would cause arbitrary code execution with the privileges of the user running x11perfcomp. (CVE-2011-2504)

Also with this update, the xorg-x11-utils and xorg-x11-server-utils packages have been upgraded to upstream version 7.5, and the xorg-x11-apps package to upstream version 7.6, which provides a number of bug fixes and enhancements over the previous versions. (BZ#835277, BZ#835278, BZ#835281)

All users of xorg-x11-utils, xorg-x11-server-utils, and xorg-x11-apps are advised to upgrade to these updated packages, which fix these issues and add these enhancements.

ID	Name	Product	Family	Severity
217488	Linux Distros Unpatched Vulnerability : CVE-2011-2504	Nessus	Misc.	high
68742	Oracle Linux 6 : Core X11 clients (ELSA-2013-0502)	Nessus	Oracle Linux Local Security Checks	high
65563	Scientific Linux Security Update : Core X11 clients on SL6.x i386/x86_64 (20130221)	Nessus	Scientific Linux Local Security Checks	medium
65137	CentOS 6 : xorg-x11-apps / xorg-x11-server-utils / xorg-x11-utils (CESA-2013:0502)	Nessus	CentOS Local Security Checks	medium
64753	RHEL 6 : Core X11 clients (RHSA-2013:0502)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2011-2504

high

Tenable Plugins

high

high

medium

medium

medium