Gentoo: GLSA-200402-02 High: XFree86 Buffer Overflow Attack

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200402-02
~                                            https://security.gentoo.org/

~  Severity: High
~     Title: XFree86 Font Information File Buffer Overflow
~      Date: February 11, 2004
~        ID: 200402-02


Synopsis
=======
Exploitation of a buffer overflow in the XFree86 Project Inc.'s XFree86
X Window System allows local attackers to gain root privileges.

Background
=========
XFree86 provides a client/server interface between display hardware
and the desktop environment while also providing both the windowing
infrastructure and a standardized API. XFree86 is platform
independent, network-transparent and extensible.

==========
Exploitation of a buffer overflow in the XFree86 Window System
discovered by iDefence [ 1 ] allows local attackers to gain root privileges.

The problem exists in the parsing of the 'font.alias' file. The X server
(running as root) fails to check...
Read the Full Advisory