CVE-2006-4447

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-08-30 · updated 2026-06-16

Description

X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.

Affected products

X.Org Emu-Linux-X87-Xlibs: 7.0_r1
X.Org X11R6: 6.7.0, 6.8, 6.8.1, 6.8.2
X.Org X11R7: 1.0, 1.0.1, 1.0.2
X.Org Xdm: 1.0.3
X.Org Xf86Dga: 1.0.0
X.Org Xinit: 1.0.2_r5
X.Org Xload: 1.0.0
X.Org xorg-server: 1.02_r5
X.Org Xterm: 214

References

http://lists.freedesktop.org/archives/xorg/2006-June/016146.html
http://mail.gnome.org/archives/beast/2006-December/msg00025.html
http://secunia.com/advisories/21650
http://secunia.com/advisories/21660
http://secunia.com/advisories/21693
http://secunia.com/advisories/22332
http://secunia.com/advisories/25032
http://secunia.com/advisories/25059
http://security.gentoo.org/glsa/glsa-200608-25.xml
http://security.gentoo.org/glsa/glsa-200704-22.xml
http://www.debian.org/security/2006/dsa-1193
http://www.kb.cert.org/vuls/id/300368

Get alerted when CVE-2006-4447 or the next vulnerability affects your stack