Vulnerability Details : CVE-2001-1409
dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or create files in the root file system.
Products affected by CVE-2001-1409
- cpe:2.3:a:xfree86_project:xfree86_x_server:4.1.0.2:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2001-1409
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 6 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2001-1409
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
3.6
|
LOW | AV:L/AC:L/Au:N/C:P/I:P/A:N |
3.9
|
4.9
|
NIST |
References for CVE-2001-1409
-
http://sunsolve.sun.com/search/document.do?assetkey=1-66-228529-1
-
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1017429.1-1
-
http://groups.google.com/groups?selm=20010829121505.A16004%40compusol.com.au
Patch;Vendor Advisory
-
http://www.redhat.com/support/errata/RHSA-2003-067.html
SupportPatch;Vendor Advisory
Jump to