X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://secunia.com/advisories/21660 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.mandriva.com/security/advisories?name=MDKSA-2006:160 | vendor-advisory x_refsource_MANDRIVA x_transferred |
| http://lists.freedesktop.org/archives/xorg/2006-June/016146.html | mailing-list x_refsource_MLIST x_transferred |
| http://www.kb.cert.org/vuls/id/300368 | third-party-advisory x_refsource_CERT-VN x_transferred |
| http://www.vupen.com/english/advisories/2006/3409 | vdb-entry x_refsource_VUPEN x_transferred |
| http://secunia.com/advisories/21693 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.debian.org/security/2006/dsa-1193 | vendor-advisory x_refsource_DEBIAN x_transferred |
| http://security.gentoo.org/glsa/glsa-200704-22.xml | vendor-advisory x_refsource_GENTOO x_transferred |
| http://secunia.com/advisories/22332 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.vupen.com/english/advisories/2007/0409 | vdb-entry x_refsource_VUPEN x_transferred |
| http://security.gentoo.org/glsa/glsa-200608-25.xml | vendor-advisory x_refsource_GENTOO x_transferred |
| http://www.securityfocus.com/bid/23697 | vdb-entry x_refsource_BID x_transferred |
| http://secunia.com/advisories/25059 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://secunia.com/advisories/25032 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://mail.gnome.org/archives/beast/2006-December/msg00025.html | mailing-list x_refsource_MLIST x_transferred |
| http://www.securityfocus.com/bid/19742 | vdb-entry x_refsource_BID x_transferred |
| http://secunia.com/advisories/21650 | third-party-advisory x_refsource_SECUNIA x_transferred |