PT-2006-1063 · X.Org+2 · Libx11+8

Dirk Mueller + 1 · Published 2006-08-28 · Updated 2011-03-08 · CVE-2006-4447

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: xdm versions prior to 1.0.4-r1

Description: The issue concerns multiple vulnerabilities in the xdm package, which can be exploited locally to compromise the confidentiality, integrity, and availability of protected information. Specifically, the X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, do not check the return values for setuid and seteuid calls when attempting to drop privileges. This might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.

Recommendations: For xdm versions prior to 1.0.4-r1, update to version 1.0.4-r1 or later to resolve the issue. As a temporary workaround, consider restricting access to the xdm package to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-09522

CVE-2006-4447

DSA-1193-1

Affected Products

Debian

Xfree86

Libx11

Xdm

Xf86Dga

Xinit

Xload

Xterm

Xtrans

References · 25

• https://bdu.fstec.ru/vul/2015-09522 · Security Note
• http://security.gentoo.org/glsa/glsa-200704-22.xml · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-4447 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4447 · Security Note
• https://osv.dev/vulnerability/CVE-2006-4447 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200608-25.xml · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-4447 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:160 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/xterm · Vendor Advisory
• http://lists.freedesktop.org/archives/xorg/2006-June/016146.html · Patch
• http://debian.org/security/2006/dsa-1193 · Vendor Advisory
• http://secunia.com/advisories/21650 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4447 · Security Note
• http://secunia.com/advisories/22332 · Note
• http://kb.cert.org/vuls/id/300368 · Note