CVE-2006-4447

2006-08-3000:00:00

ubuntu.com

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.001

Percentile

37.0%

JSON

X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans,
and xterm, does not check the return values for setuid and seteuid calls
when attempting to drop privileges, which might allow local users to gain
privileges by causing those calls to fail, such as by exceeding a ulimit.

OSVersionArchitecturePackageVersionFilename
ubuntu7.04noarchbeast< 0.6.6-8UNKNOWN
ubuntu7.10noarchbeast< 0.6.6-8UNKNOWN
ubuntu8.04noarchbeast< 0.6.6-8UNKNOWN
ubuntu8.10noarchbeast< 0.6.6-8UNKNOWN
ubuntu9.04noarchbeast< 0.6.6-8UNKNOWN
ubuntu9.10noarchbeast< 0.6.6-8UNKNOWN
ubuntu6.06noarchxorg-server< 1.0.2-0ubuntu10.7UNKNOWN
ubuntu6.10noarchxorg-server< 1.1.1-0ubuntu12.2UNKNOWN
ubuntu7.04noarchxorg-server< 1.2.0-3ubuntu8UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	7.04	noarch	beast	< 0.6.6-8	UNKNOWN
ubuntu	7.10	noarch	beast	< 0.6.6-8	UNKNOWN
ubuntu	8.04	noarch	beast	< 0.6.6-8	UNKNOWN
ubuntu	8.10	noarch	beast	< 0.6.6-8	UNKNOWN
ubuntu	9.04	noarch	beast	< 0.6.6-8	UNKNOWN
ubuntu	9.10	noarch	beast	< 0.6.6-8	UNKNOWN
ubuntu	6.06	noarch	xorg-server	< 1.0.2-0ubuntu10.7	UNKNOWN
ubuntu	6.10	noarch	xorg-server	< 1.1.1-0ubuntu12.2	UNKNOWN
ubuntu	7.04	noarch	xorg-server	< 1.2.0-3ubuntu8	UNKNOWN