CVE-2006-0745: High severity X.Org X11R7 vulnerability
X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and (1) execute arbitrary code via the -modulepath command line option or (2) overwrite arbitrary files via -logfile.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0745?
CVE-2006-0745 is classified as a moderate severity vulnerability due to its potential to allow local users to execute arbitrary code.
How do I fix CVE-2006-0745?
To fix CVE-2006-0745, update the X.Org server to a version that has patched the vulnerability.
Which versions are affected by CVE-2006-0745?
CVE-2006-0745 affects X.Org server versions 1.0.0 and later, X11R6.9.0, and X11R7.0, among others.
Can CVE-2006-0745 be exploited remotely?
CVE-2006-0745 cannot be exploited remotely as it requires local user access to the system.
Who is at risk from CVE-2006-0745?
Local users on systems running affected versions of the X.Org server are at risk from CVE-2006-0745.