CVE-2006-0745

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-21 · updated 2026-06-16

Description

X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and (1) execute arbitrary code via the -modulepath command line option or (2) overwrite arbitrary files via -logfile.

Affected products

Mandrakesoft Mandrake Linux: 2006
RedHat Fedora Core: core_5.0
Sun Solaris: 10.0
Suse Linux: 10.0
X.Org X11R6: 6.9
X.Org X11R7: 1.0, 1.0.1

References

http://secunia.com/advisories/19256
http://secunia.com/advisories/19307
http://secunia.com/advisories/19311
http://secunia.com/advisories/19316
http://secunia.com/advisories/19676
http://securityreason.com/securityalert/606
http://securitytracker.com/id?1015793
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102252-1
http://support.avaya.com/elmodocs2/security/ASA-2006-078.htm
http://www.mandriva.com/security/advisories?name=MDKSA-2006:056
http://www.novell.com/linux/security/advisories/2006_16_xorgx11server.html
http://www.osvdb.org/24000

Get alerted when CVE-2006-0745 or the next vulnerability affects your stack