NVD

Id
59475  
Name
CVE-2006-0745  
Description
X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and (1) execute arbitrary code via the -modulepath command line option or (2) overwrite arbitrary files via -logfile.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-03-20  
Modified Date
2011-03-07  
Seq
2006-0745  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
305828 59475 CVE-2006-0745 oval:org.mitre.oval:def:1697  View
305829 59475 CVE-2006-0745 606  View
305830 59475 CVE-2006-0745 1015793  View
305831 59475 CVE-2006-0745 102252  View
305832 59475 CVE-2006-0745 http://support.avaya.com/elmodocs2/security/ASA-2006-078.htm  View
305833 59475 CVE-2006-0745 MDKSA-2006:056  View
305834 59475 CVE-2006-0745 SUSE-SA:2006:016  View
305835 59475 CVE-2006-0745 FEDORA-2006-172  View
305836 59475 CVE-2006-0745 20060320 [CVE-2006-0745] X.Org Security Advisory: privilege escalation and DoS in X11R6.9, X11R7.0  View
305837 59475 CVE-2006-0745 20060320 Re: [CVE-2006-0745] X.Org Security Advisory: privilege escalation and DoS in X11R6.9, X11R7.0  View
305838 59475 CVE-2006-0745 17169  View
305839 59475 CVE-2006-0745 ADV-2006-1017  View
305840 59475 CVE-2006-0745 ADV-2006-1028  View
305841 59475 CVE-2006-0745 xorg-geteuid-privilege-escalation(25341)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57943 JVNDB-2006-000139 X.Org の xorg-server における権限昇格の脆弱性 X.Org に含まれる xorg-server には、セキュリティ制限が適切に行われていないため、本来 root ユーザのみが利用可能なオプションを root 以外のユーザでも使用できてしまう脆弱性が存在します。 CVE-2006-0745 16847 CVE-2006-0745 59475 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000139.html 2006-03-20 2007-04-01 View