← Back

Xdm

xdm

Vendor: X.org • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-5215
3Netbsd
SunX.org
4Netbsd
SolarisSunos+1 more
Apr 23, 2026
Oct 10, 2006
N/A· v4
N/A· v3
2.6 LOW· v2
The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's...Show more
The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /tmp/xses-$USER file.Show less
CVE-2006-4447
1X.org
9Emu Linux X87 Xlibs
X11r6X11r7+6 more
Apr 16, 2026
Aug 30, 2006
N/A· v4
N/A· v3
7.2 HIGH· v2
X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain...Show more
X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.Show less