Approved changes feed: RSS · Atom

cpe:2.3:a:tedfelix:acpid2:2.0.1:*:*:*:*:*:*:*

part: a version: 2.0.1 update: *

VendorTedfelix (4e091ac5-6299-54f8-b385-e4676cc84137)
ProductAcpid2 (d2d8c66e-aeba-531f-a519-0378af60fc63)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/salewski/acpid2 purl2cpe 2026-06-01 10:12:02.607474
pkg:github/tedfelix/acpid2 purl2cpe 2026-06-01 10:12:02.607475
pkg:sourceforge/acpid2 purl2cpe 2026-06-01 10:12:02.607477

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4578 vulnerable 2026-06-08 04:59:31.996019 Details available
event.c in acpid (aka acpid2) before 2.0.11 does not have an appropriate umask setting during execution of event-handler scripts, which might allow local users to (1) perform write operations within directories created by a script, or (2) read files created by a script, via standard filesystem system calls.
Published: 2012-08-29T22:00:00.000Z
Updated: 2024-08-07T00:09:19.272Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2777 vulnerable 2026-06-08 04:58:09.236128 Details available
samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows local users to gain privileges by running a program with the name kded4 and a DBUS_SESSION_BUS_ADDRESS environment variable containing commands.
Published: 2012-08-29T22:00:00.000Z
Updated: 2024-09-17T04:18:48.168Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.