CVE-2006-0745

Published: 21/03/2006 Updated: 19/10/2018

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 725

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and (1) execute arbitrary code via the -modulepath command line option or (2) overwrite arbitrary files via -logfile.

Vulnerable Product	Search on Vulmon	Subscribe to Product
x.org x11r7 1.0
x.org x11r7 1.0.1
x.org x11r6 6.9
mandrakesoft mandrake linux 2006
suse suse linux 10.0
redhat fedora core core 5.0
sun solaris 10.0

Debian Bug report logs - #360388 xserver-xorg: local user DoS and arbitrary code execution as root [CVE-2006-0745] Package: xserver-xorg; Maintainer for xserver-xorg is Debian X Strike Force <debian-x@listsdebianorg>; Source for xserver-xorg is src:xorg (PTS, buildd, popcon) Reported by: Filipus Klutiero <cheal@hotpopc ...

# From Daniel Stone's Advisory # xorg-server 100, as shipped with X11R70, and all release candidates # of X11R70, is vulnerable # X11R690, and all release candidates, are vulnerable # X11R682 and earlier versions are not vulnerable # The rest is H D Moore from metasploit Two second exploit, but if anyone is lazy: $ wget metasp ...

xorg-x11-server versions prior to 1203 modulepath local privilege escalation exploit ...

NVD-CWE-Other http://www.securityfocus.com/bid/17169 http://secunia.com/advisories/19311 http://www.novell.com/linux/security/advisories/2006_16_xorgx11server.html http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00026.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-102252-1 http://www.osvdb.org/24000 http://www.osvdb.org/24001 http://securitytracker.com/id?1015793 http://secunia.com/advisories/19256 http://secunia.com/advisories/19307 http://secunia.com/advisories/19316 http://support.avaya.com/elmodocs2/security/ASA-2006-078.htm http://secunia.com/advisories/19676 http://www.mandriva.com/security/advisories?name=MDKSA-2006:056 http://securityreason.com/securityalert/606 http://www.vupen.com/english/advisories/2006/1028 http://www.vupen.com/english/advisories/2006/1017 https://exchange.xforce.ibmcloud.com/vulnerabilities/25341 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1697 http://www.securityfocus.com/archive/1/428230/100/0/threaded http://www.securityfocus.com/archive/1/428183/100/0/threaded https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360388 https://www.exploit-db.com/exploits/1596/https://www.kb.cert.org/vuls/id/837857

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-0745

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect