X.org: local privilege escalations [LWN.net]

Package(s):

xorg-x11

CVE #(s):

CVE-2006-4447

Created:

August 28, 2006

Updated:

April 30, 2007

Description:

Several X.org libraries and X.org itself contain system calls to set*uid() functions, without checking their result. Local users could deliberately exceed their assigned resource limits and elevate their privileges after an unsuccessful set*uid() system call. This requires resource limits to be enabled on the machine.

Alerts:

Gentoo	200704-22	2007-04-27
Mandriva	MDKSA-2006:160	2006-08-31
Gentoo	200608-25	2006-08-28

(Log in to post comments)