CVE - CVE-2006-0745

CVE-ID
CVE-2006-0745	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and (1) execute arbitrary code via the -modulepath command line option or (2) overwrite arbitrary files via -logfile.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:17169 URL:http://www.securityfocus.com/bid/17169 BUGTRAQ:20060320 Re: [CVE-2006-0745] X.Org Security Advisory: privilege escalation and DoS in X11R6.9, X11R7.0 URL:http://www.securityfocus.com/archive/1/428230/100/0/threaded BUGTRAQ:20060320 [CVE-2006-0745] X.Org Security Advisory: privilege escalation and DoS in X11R6.9, X11R7.0 URL:http://www.securityfocus.com/archive/1/428183/100/0/threaded CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-078.htm FEDORA:FEDORA-2006-172 URL:http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00026.html MANDRIVA:MDKSA-2006:056 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:056 OSVDB:24000 URL:http://www.osvdb.org/24000 OSVDB:24001 URL:http://www.osvdb.org/24001 OVAL:oval:org.mitre.oval:def:1697 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1697 SECTRACK:1015793 URL:http://securitytracker.com/id?1015793 SECUNIA:19256 URL:http://secunia.com/advisories/19256 SECUNIA:19307 URL:http://secunia.com/advisories/19307 SECUNIA:19311 URL:http://secunia.com/advisories/19311 SECUNIA:19316 URL:http://secunia.com/advisories/19316 SECUNIA:19676 URL:http://secunia.com/advisories/19676 SREASON:606 URL:http://securityreason.com/securityalert/606 SUNALERT:102252 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102252-1 SUSE:SUSE-SA:2006:016 URL:http://www.novell.com/linux/security/advisories/2006_16_xorgx11server.html VUPEN:ADV-2006-1017 URL:http://www.vupen.com/english/advisories/2006/1017 VUPEN:ADV-2006-1028 URL:http://www.vupen.com/english/advisories/2006/1028 XF:xorg-geteuid-privilege-escalation(25341) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/25341
Assigning CNA
Red Hat, Inc.
Date Record Created
20060217	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20060217)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is a record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)