CVE-2006-4447

2006-08-3001:04:00

Debian Security Bug Tracker

security-tracker.debian.org

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.1%

JSON

X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.

OSVersionArchitecturePackageVersionFilename
Debian12alllibx11< 2:1.0.0-7libx11_2:1.0.0-7_all.deb
Debian11alllibx11< 2:1.0.0-7libx11_2:1.0.0-7_all.deb
Debian10alllibx11< 2:1.0.0-7libx11_2:1.0.0-7_all.deb
Debian999alllibx11< 2:1.0.0-7libx11_2:1.0.0-7_all.deb
Debian13alllibx11< 2:1.0.0-7libx11_2:1.0.0-7_all.deb
Debian12allxdm< 1:1.0.5-1xdm_1:1.0.5-1_all.deb
Debian11allxdm< 1:1.0.5-1xdm_1:1.0.5-1_all.deb
Debian10allxdm< 1:1.0.5-1xdm_1:1.0.5-1_all.deb
Debian999allxdm< 1:1.0.5-1xdm_1:1.0.5-1_all.deb
Debian13allxdm< 1:1.0.5-1xdm_1:1.0.5-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libx11	< 2:1.0.0-7	libx11_2:1.0.0-7_all.deb
Debian	11	all	libx11	< 2:1.0.0-7	libx11_2:1.0.0-7_all.deb
Debian	10	all	libx11	< 2:1.0.0-7	libx11_2:1.0.0-7_all.deb
Debian	999	all	libx11	< 2:1.0.0-7	libx11_2:1.0.0-7_all.deb
Debian	13	all	libx11	< 2:1.0.0-7	libx11_2:1.0.0-7_all.deb
Debian	12	all	xdm	< 1:1.0.5-1	xdm_1:1.0.5-1_all.deb
Debian	11	all	xdm	< 1:1.0.5-1	xdm_1:1.0.5-1_all.deb
Debian	10	all	xdm	< 1:1.0.5-1	xdm_1:1.0.5-1_all.deb
Debian	999	all	xdm	< 1:1.0.5-1	xdm_1:1.0.5-1_all.deb
Debian	13	all	xdm	< 1:1.0.5-1	xdm_1:1.0.5-1_all.deb