← Back

X11r7

x11r7

Vendor: X.org • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-4447
1X.org
9Emu Linux X87 Xlibs
X11r6X11r7+6 more
Apr 16, 2026
Aug 30, 2006
N/A· v4
N/A· v3
7.2 HIGH· v2
X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain...Show more
X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.Show less
CVE-2006-0745
5Mandrakesoft
RedhatSun+2 more
6Fedora Core
Mandrake LinuxSolaris+3 more
Apr 16, 2026
Mar 21, 2006
N/A· v4
N/A· v3
7.2 HIGH· v2
X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended r...Show more
X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and (1) execute arbitrary code via the -modulepath command line option or (2) overwrite arbitrary files via -logfile.Show less