CVE:CVE-2012-0871
CNNVD:CNNVD-201203-024
systemd是德国软件开发者Lennart Poettering和其他人共同研发的一款基于Linux的系统和服务管理器，它兼容了SysV和LSB的启动脚本，且提供了一个用来表示系统服务间依赖关系的框架。
systemd 37及之前版本的systemd-logind中的login/logind-session.c文件的‘session_link_x11_socket’函数存在安全漏洞。本地攻击者可通过对/run/user/目录下的X11用户目录实施符号链接攻击利用该漏洞创建或覆盖任意文件。
solution:Upgrade systemd_project systemd to a higher version than 037,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,and avoid the version (,037],1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36; Upgrade opensuse opensuse to a higher version than 12.1,and avoid the version 12.1