CVE-2006-4447

Publication date 30 August 2006

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Description

X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.

Status

Package Ubuntu Release Status
beast 9.10 karmic
Fixed in 0.6.6-8
9.04 jaunty
Fixed in 0.6.6-8
8.10 intrepid
Fixed in 0.6.6-8
8.04 LTS hardy
Fixed in 0.6.6-8
7.10 gutsy
Fixed in 0.6.6-8
7.04 feisty
Fixed in 0.6.6-8
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life
xorg-server 9.10 karmic
Not affected
9.04 jaunty
Not affected
8.10 intrepid
Not affected
8.04 LTS hardy
Not affected
7.10 gutsy
Not affected
7.04 feisty
Fixed in 1.2.0-3ubuntu8
6.10 edgy
Fixed in 1.1.1-0ubuntu12.2
6.06 LTS dapper
Fixed in 1.0.2-0ubuntu10.7

References

Other references

Access our resources on patching vulnerabilities