Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.2
CVSSv2

CVE-2006-4447

Published: 30/08/2006 Updated: 08/03/2011
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Subscribe to X11r6

Vulnerability Summary

X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.

Vulnerable Product Search on Vulmon Subscribe to Product

x.org x11r6 6.8.1

x.org x11r6 6.8.2

x.org xload 1.0.0

x.org xorg-server 1.02_r5

x.org emu-linux-x87-xlibs 7.0_r1

x.org x11r6 6.7.0

x.org x11r6 6.8

x.org xf86dga 1.0.0

x.org xinit 1.0.2_r5

x.org x11r7 1.0

x.org x11r7 1.0.1

x.org xterm 214

x.org x11r7 1.0.2

x.org xdm 1.0.3

Vendor Advisories

Debian Security Advisories: DSA-1193-1 xfree86 -- several vulnerabilities
Several vulnerabilities have been discovered in the X Window System, which may lead to the execution of arbitrary code or denial of service The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-3467 Chris Evan discovered an integer overflow in the code to handle PCF fonts, which might lead to denial ...

References

NVD-CWE-Otherhttp://lists.freedesktop.org/archives/xorg/2006-June/016146.htmlhttp://security.gentoo.org/glsa/glsa-200608-25.xmlhttp://www.securityfocus.com/bid/19742http://secunia.com/advisories/21650http://secunia.com/advisories/21660http://secunia.com/advisories/21693http://www.debian.org/security/2006/dsa-1193http://secunia.com/advisories/22332http://www.kb.cert.org/vuls/id/300368http://mail.gnome.org/archives/beast/2006-December/msg00025.htmlhttp://security.gentoo.org/glsa/glsa-200704-22.xmlhttp://www.securityfocus.com/bid/23697http://secunia.com/advisories/25032http://secunia.com/advisories/25059http://www.mandriva.com/security/advisories?name=MDKSA-2006:160http://www.vupen.com/english/advisories/2007/0409http://www.vupen.com/english/advisories/2006/3409https://nvd.nist.govhttps://www.debian.org/security/./dsa-1193https://www.kb.cert.org/vuls/id/300368
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook