Vulnerability CVE-2006-4447
Published: 2006-08-29   Modified: 2012-02-12

Description:
X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.

CVSS2 => (AV:L/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.2/10
10/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
X.org -> Emu-linux-x87-xlibs 
X.org -> X11r6 
X.org -> X11r7 
X.org -> XDM 
X.org -> Xf86dga 
X.org -> Xinit 
X.org -> Xload 
X.org -> Xorg-server 
X.org -> Xterm 

 References:
http://www.kb.cert.org/vuls/id/300368
http://security.gentoo.org/glsa/glsa-200608-25.xml
http://secunia.com/advisories/21650
http://lists.freedesktop.org/archives/xorg/2006-June/016146.html
http://www.vupen.com/english/advisories/2007/0409
http://www.vupen.com/english/advisories/2006/3409
http://www.securityfocus.com/bid/19742
http://secunia.com/advisories/21660
http://www.securityfocus.com/bid/23697
http://www.mandriva.com/security/advisories?name=MDKSA-2006:160
http://www.debian.org/security/2006/dsa-1193
http://security.gentoo.org/glsa/glsa-200704-22.xml
http://secunia.com/advisories/25059
http://secunia.com/advisories/25032
http://secunia.com/advisories/22332
http://secunia.com/advisories/21693
http://mail.gnome.org/archives/beast/2006-December/msg00025.html
Copyright 2024, cxsecurity.com

 

Back to Top