Skip to main content

Incorrect Default Permissions

CVE-2013-4394

Medium
5.9/10

Summary

The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."

  • HIGH
  • LOCAL
  • NONE
  • COMPLETE
  • COMPLETE
  • PARTIAL

CWE-276 - Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References

Advisory Timeline

  • Published