33 matches found
Fedora Update for xorg-x11-xinit FEDORA-2007-659
Check for the Version of xorg-x11-xinit OpenVAS Vulnerability Test Fedora Update for xorg-x11-xinit FEDORA-2007-659 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Gentoo Security Advisory GLSA 200608-25 (xorg-x11, xorg-server, xtrans, xload, xinit, xterm, xf86dga, xdm, libX11)
The remote host is missing updates announced in advisory GLSA 200608-25. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Corel Linux 1.0 xconf工具存在多个安全漏洞
Corel Linux中的xconf工具中缺乏对用户输入的有效检查,并且没有正确放弃特权。因此本 地用户可以利用这些漏洞获得root权限,或者导致拒绝服务攻击。 1 将XF86Config的一些数据添加到系统中的任意文件中去。 /sbin/buildxconf没有检查用户输入的数据,并且被设置了setuid root位。当用"-f" 参数执行它时,用户可以将输出存储到一个指定文件,比如/etc/shadow 2 用一些垃圾数据替换掉任何存在文件的第一行 当用"-x"参数执行buildxconf程序时,它将用X server的路径/文件名替代掉指定文件的第...
Ubuntu 5.10 / 6.06 LTS : xinit vulnerability (USN-364-1)
A race condition existed that would allow other local users to see error messages generated during another user's X session. This could allow potentially sensitive information to be leaked. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...
Fedora 7 : xorg-x11-xinit-1.0.2-21.fc7 (2007-1409)
Thu Aug 2 2007 Soren Sandmann 1.0.2-21 - Fix bug 212167, CVE-2006-5214 - Sun Apr 22 2007 Matthias Clasen 1.0.2-20 - Don't install INSTALL Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora Core 6 : xorg-x11-xinit-1.0.2-16.fc6 (2007-659)
Thu Aug 2 2007 Soren Sandmann - 1.0.2-16 - Fix bug 212167; CVE-2006-5214. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
[SECURITY] Fedora Core 6 Update: xorg-x11-xinit-1.0.2-16.fc6
X.Org X11 X Window System xinit startup scripts...
[SECURITY] Fedora 7 Update: xorg-x11-xinit-1.0.2-21.fc7
X.Org X11 X Window System xinit startup scripts...
[USN-364-1] Xsession vulnerability
=========================================================== Ubuntu Security Notice USN-364-1 October 16, 2006 xinit vulnerability CVE-2006-5214 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10 Ubuntu 6.06 LTS This...
CVE-2006-4447
X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit...
CVE-2006-4447
Summary: CVE-2006-4447 affects X.Org and XFree86 components (libX11, xdm, xf86dga, xinit, xload, xtrans, xterm) where setuid/seteuid return values are not checked when dropping privileges. This may enable local privilege escalation if those calls fail (e.g., due to ulimit). What is affected: X.Or...
X.org and some X.org libraries: Local privilege escalations
Background X.org is an implementation of the X Window System. Description Several X.org libraries and X.org itself contain system calls to setuid functions, without checking their result. Impact Local users could deliberately exceed their assigned resource limits and elevate their privileges afte...
Corel Linux OS 1.0 - 'setxconf' Local Privilege Escalation
source: https://www.securityfocus.com/bid/1008/info A vulnerability exists in the setxconf utility, as shipped with Corel Linux 1.0. The -T option to setxconf will run xinit, which euid root. xinit, when executed, will invoke the contents on /.xserverrc. A malicious user could therefore execute...