Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 436
Alerts This Week
Warning Icon 1 436

Debian DSA-1466-1 Critical: Local Privilege Escalation in Xorg-Server

debian
Calendar Grey January 17, 2008
Scroller Debian
- ------------------------------------------------------------------------Debian Security Advisory D
Several local vulnerabilities have been discovered in the X.Org X server
Topics%20covered

Topics Covered

security advisory critical local privilege escalation software update debian input sanitization xorg-server

Summary


"regenrecht" discovered that missing input sanitising within
the XFree86-Misc extension may lead to local privilege escalation.

CVE-2007-5958

It was discovered that error messages of security policy file
handling may lead to a minor information leak disclosing the
existance of files otherwise unaccessible to the user.

CVE-2007-6427

"regenrecht" discovered that missing input sanitising within
the XInput-Misc extension may lead to local privilege escalation.

CVE-2007-6428

"regenrecht" discovered that missing input sanitising within
the TOG-CUP extension may lead to disclosure of memory contents.

CVE-2007-6429

"regenrecht" discovered that integer overflows in the EVI
and MIT-SHM extensions may lead to local privilege escalation.

For the unstable distribution (sid), this problem has been fixed in
version 2:1.4.1~git20080105-2 of xorg-server and version 1:1.3.1-2
of libxfont.

For the stable distribution (etch), this problem has been ...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory critical local privilege escalation software update debian input sanitization xorg-server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.