The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| X_server | X.org | - (including) | - (including) |
| Ubuntu_linux | Canonical | 10.04 (including) | 10.04 (including) |
| Ubuntu_linux | Canonical | 10.10 (including) | 10.10 (including) |
| Ubuntu_linux | Canonical | 11.04 (including) | 11.04 (including) |
| Ubuntu_linux | Canonical | 11.10 (including) | 11.10 (including) |
| Debian_linux | Debian | * | * |
| Linux | Ubuntu | * | * |
| Xorg | Ubuntu | hardy | * |
| Xorg | Ubuntu | lucid | * |
| Xorg | Ubuntu | maverick | * |
| Xorg | Ubuntu | natty | * |
| Xorg | Ubuntu | oneiric | * |
| Xorg | Ubuntu | upstream | * |