CVE-2011-4029: The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permi...

Security readout for executives and security teams

This is an old X.Org X server local vulnerability. A user already on the machine could abuse lock-file handling to make arbitrary files world-readable, read them, or disrupt services by removing execute permissions. It is mainly a risk on shared Unix/Linux systems or desktops where untrusted local users have access. Exposure is most likely on legacy systems running X.Org xserver before 1.11.2, especially multi-user hosts. The provided affected-product metadata is incomplete, so package-level exposure should be verified against vendor advisories and distribution backports. Treat as a targeted cleanup item for legacy or shared systems. It is not shown as actively exploited, but arbitrary file disclosure and permission tampering can affect confidentiality and availability on multi-user hosts. Mitigation focus: Upgrade X.Org xserver to 1.11.2 or a vendor-fixed backported package.; Check Red Hat and distribution advisories for the exact fixed package versions.; Reduce untrusted local shell or desktop access until affected systems are patched..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.