CVE-2009-4033

A certain Red Hat patch for acpid 1.0.4 effectively triggers a call to the open function with...

6.9 MediumFix available

A certain Red Hat patch for acpid 1.0.4 effectively triggers a call to the open function with insufficient arguments, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file, cause a denial of service by overwriting this file, or gain privileges by executing this file.

Exploit likelihood

0.31%Down 0.8 points since Feb 4, 2022

What each source reports

NVD Score used 6.9

Record: CVE-2009-4033
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Record: CVE-2009-4033
Updated: 2026-11-02

EUVDEUVD-2009-4004 No score

Record: EUVD-2009-4004
Updated: 2026-11-03

GitHub AdvisoriesGHSA-34cv-vv2p-pf8p No score

A certain Red Hat patch for acpid 1.0.4 effectively triggers a call to the open function with...

Record: GHSA-34cv-vv2p-pf8p
Updated: 2026-11-02

Affected products

tim hockin acpid

Affected packages

Affected packages
Package	Affected	Fixed
`acpid` Red Hat:enterprise_linux:5::client	before 0:1.0.4-9.el5_4.1	0:1.0.4-9.el5_4.1
`acpid-debuginfo` Red Hat:enterprise_linux:5::client	before 0:1.0.4-9.el5_4.1	0:1.0.4-9.el5_4.1
`acpid` Red Hat:enterprise_linux:5::server	before 0:1.0.4-9.el5_4.1	0:1.0.4-9.el5_4.1
`acpid-debuginfo` Red Hat:enterprise_linux:5::server	before 0:1.0.4-9.el5_4.1	0:1.0.4-9.el5_4.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-4033 is a medium vulnerability (CVSS 6.9) in Tim Hockin Acpid, published December 8, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 23rd percentile. Fixed in acpid 0:1.0.4-9.el5_4.1.

References

Show 9 moreShow less