CVE-2011-4028

LOW · CVSS 1.2 EPSS 0.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-07-03 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2011-4028

Severity

LOW

CVSS

1.2

EPSS

0.37%

Original Filing — NVD Description

The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists.