Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows local users to gain privileges by running a program with the name kded4 and a DBUS_SESSION_BUS_ADDRESS environment variable containing commands.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
acpid 本地权限提升漏洞
Vulnerability Description
acpid是一个灵活、可扩展的ACPI事件递送守护程序。 acpid 2.0.16版本和早期版本中存在本地权限提升漏洞,该漏洞源于识别KDE会话守护进程的ID时在"samples/powerbtn/powerbtn.sh"脚本中的错误。攻击者可利用该漏洞通过DBUS_SESSION_BUS_ADDRESS环境变量注入命令。
CVSS Information
N/A
Vulnerability Type
N/A