CVE-2014-4910 Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the interface name...
MediumCVSS 4.6
EPSS 0.98%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the interface name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xf86-video-intel | = 2.99.911 | No fix listed |
References
- [xorg-commit] 20140704 xf86-video-intel: tools/backlight_helper.c mailing-list
- 108851 vdb-entry
- [oss-security] 20140711 Re: X.Org intel driver dev snapshots, backlight helper issue mailing-list
- [oss-security] 20140704 X.Org intel driver dev snapshots, backlight helper issue mailing-list
- xorg-x86-driver-dir-traversal(94746) vdb-entry
- Debian Security Tracker CVE-2014-4910 vendor-advisory