Test ID:	1.3.6.1.4.1.25623.1.0.870936
Category:	Red Hat Local Security Checks
Title:	RedHat Update for Core X11 clients RHSA-2013:0502-02
Summary:	The remote host is missing an update for the 'Core X11 clients'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'Core X11 clients' package(s) announced via the referenced advisory. Vulnerability Insight: The Core X11 clients packages provide the xorg-x11-utils, xorg-x11-server-utils, and xorg-x11-apps clients that ship with the X Window System. It was found that the x11perfcomp utility included the current working directory in its PATH environment variable. Running x11perfcomp in an attacker-controlled directory would cause arbitrary code execution with the privileges of the user running x11perfcomp. (CVE-2011-2504) Also with this update, the xorg-x11-utils and xorg-x11-server-utils packages have been upgraded to upstream version 7.5, and the xorg-x11-apps package to upstream version 7.6, which provides a number of bug fixes and enhancements over the previous versions. (BZ#835277, BZ#835278, BZ#835281) All users of xorg-x11-utils, xorg-x11-server-utils, and xorg-x11-apps are advised to upgrade to these updated packages, which fix these issues and add these enhancements. Affected Software/OS: Core X11 clients on Red Hat Enterprise Linux Desktop (v. 6), Red Hat Enterprise Linux Server (v. 6), Red Hat Enterprise Linux Workstation (v. 6) Solution: Please Install the Updated Packages. CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2504 58082 http://www.securityfocus.com/bid/58082 RHSA-2013:0502 http://rhn.redhat.com/errata/RHSA-2013-0502.html [xorg-announce] 20110727 [ANNOUNCE] x11perf 1.5.4 http://lists.freedesktop.org/archives/xorg-announce/2011-July/001715.html https://bugzilla.redhat.com/show_bug.cgi?id=717672 x11perf-priv-esc(82241) https://exchange.xforce.ibmcloud.com/vulnerabilities/82241
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.