Description
A certain Red Hat patch for acpid 1.0.4 effectively triggers a call to the open function with insufficient arguments, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file, cause a denial of service by overwriting this file, or gain privileges by executing this file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | acpid | 1.0.4-9.el5_4.1 | RHSA-2009:1642 |
Advisories 1
- RHSA-2009:1642 Red Hat Security Advisory: acpid security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 37249 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=542926
- 1023284 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=515062
- oval:org.mitre.oval:def:10555 vdb-entry signature
- RHSA-2009:1642 vendor-advisory
- acpid-logfile-privilege-escalation(54677) vdb-entry
- MDVSA-2009:342 vendor-advisory