CVE-2006-4447

Published: Aug 30, 2006Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.

Affected (14)

Products: X.org: Emu Linux X87 Xlibs, X11r6, X11r7, Xdm, Xf86dga, Xinit, Xload, Xorg Server, Xterm

9 products

Emu Linux X87 Xlibs

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
X.org Emu Linux X87 Xlibs	Version 7.0_r1
X.org X11r6	Version 6.7.0
X.org X11r6	Version 6.8.1
X.org X11r6	Version 6.8.2
X.org X11r6	Version 6.8
X.org X11r7	Version 1.0.1
X.org X11r7	Version 1.0.2
X.org X11r7	Version 1.0
X.org Xdm	Version 1.0.3
X.org Xf86dga	Version 1.0.0
X.org Xinit	Version 1.0.2_r5
X.org Xload	Version 1.0.0
X.org Xorg Server	Version 1.02_r5
X.org Xterm	Version 214

References (34)

http://lists.freedesktop.org/archives/xorg/2006-June/016146.html

Source: cve@mitre.org

Patch

http://mail.gnome.org/archives/beast/2006-December/msg00025.html

Source: cve@mitre.org

http://secunia.com/advisories/21650

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/21660

Source: cve@mitre.org

http://secunia.com/advisories/21693

Source: cve@mitre.org

http://secunia.com/advisories/22332

Source: cve@mitre.org

http://secunia.com/advisories/25032

Source: cve@mitre.org

http://secunia.com/advisories/25059

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200608-25.xml

Source: cve@mitre.org

PatchVendor Advisory

http://security.gentoo.org/glsa/glsa-200704-22.xml

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1193

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/300368

Source: cve@mitre.org

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2006:160

Source: cve@mitre.org

http://www.securityfocus.com/bid/19742

Source: cve@mitre.org

http://www.securityfocus.com/bid/23697

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3409

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0409

Source: cve@mitre.org

http://lists.freedesktop.org/archives/xorg/2006-June/016146.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://mail.gnome.org/archives/beast/2006-December/msg00025.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21650

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/21660

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21693

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22332

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25032

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25059

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200608-25.xml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://security.gentoo.org/glsa/glsa-200704-22.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1193

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/300368

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2006:160

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19742

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23697

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3409

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/0409

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.