Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo Linux: GLSA-200710-11 High Severity: X Font Server Local Attack

gentoo
Calendar Grey October 12, 2007
Scroller Gentoo
Serious vulnerabilities identified in the X Font Server of Gentoo pose risks for local exploitation. Users are advised to perform an urgent upgrade.
Three vulnerabilities have been discovered in the X Font Server possibly allowing local attackers to gain elevated privileges.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200710-11
                                            https://security.gentoo.org/

  Severity: High
     Title: X Font Server: Multiple Vulnerabilities
      Date: October 12, 2007
      Bugs: #185660, #194606
        ID: 200710-11


Synopsis
=======
Three vulnerabilities have been discovered in the X Font Server
possibly allowing local attackers to gain elevated privileges.

Background
=========
The X.Org X11 X Font Server provides a standard mechanism for an X
server to communicate with a font renderer.

Affected packages
================
    -------------------------------------------------------------------
     Package       /  Vulnerable  /                         Unaffected
    -------------------------------------------------------------------
  1  x11-apps/xfs       < 1.0.5                               >= 1.0.5

==========
iDefense reported that the xfs init script does n...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory high severity gentoo multiple issues local attack x font server

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity gentoo multiple issues local attack x font server

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround