Security Advisory

CVE-2006-4447

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-08-30 01:00:00

Last updated 2024-08-07 19:14:46

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.

← Browse all CVEs View on cve.org ↗