CVE-2011-2504
UnknownEPSS 0.40%
Last modified
CVE-2011-2504 is a vulnerability of currently unknown severity. Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory.. EPSS estimates a 0.40% chance of exploitation in the next 30 days.
Description
Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Xfree86 | X11perf | <= 1.5.3 |
| Xfree86 | X11perf | 1.5 |
| Xfree86 | X11perf | 1.5.1 |
| Xfree86 | X11perf | 1.5.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-2504?
Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory.
How severe is CVE-2011-2504?
Severity scoring for CVE-2011-2504 is pending analysis. The EPSS model estimates a 0.40% probability of exploitation in the next 30 days.
How do I fix CVE-2011-2504?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-2498The Linux kernel from v2.3.36 before v2.6.39 allows local un…5.5
- CVE-2011-2499Mambo CMS through 4.6.5 has multiple XSS.6.1
- CVE-2011-2500The host_reliable_addrinfo function in support/export/hostna…
- CVE-2011-2501The png_format_buffer function in pngerror.c in libpng 1.0.x…6.5
- CVE-2011-2502runtime/staprun/staprun_funcs.c in the systemtap runtime too…
- CVE-2011-2503The insert_module function in runtime/staprun/staprun_funcs.…
- CVE-2011-2505libraries/auth/swekey/swekey.auth.lib.php in the Swekey auth…
- CVE-2011-2506setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before…
- CVE-2011-2507libraries/server_synchronize.lib.php in the Synchronize impl…
- CVE-2011-2508Directory traversal vulnerability in libraries/display_tbl.l…
- CVE-2011-2509Multiple cross-site scripting (XSS) vulnerabilities in Jooml…
- CVE-2011-2510Cross-site scripting (XSS) vulnerability in the RSS embeddin…
Are you affected by CVE-2011-2504?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST