CVE-2011-4613: Canonical Ubuntu Linux

Medium severity, CVSS 4.6. EPSS: 0.9% chance of exploitation in the next 30 days.

The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY.

Affected products

• Canonical Ubuntu Linux: version 10.04 only; version 10.10 only; version 11.04 only; version 11.10 only
• Debian Debian Linux: any version
• Ubuntu Linux: any version
• X.org X Server: affected versions not specified

Published 2014-02-05. Last modified 2026-06-16.