Advisories Blog | G5 Cyber Security

Mandriva Linux Security Advisory 2006.160

Mandriva Linux Security Advisory MDKSA-2006-160 – X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.

 

You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49700/MDKSA-2006-160.txt

Source: https://packetstormsecurity.com/files/49700/Mandriva-Linux-Security-Advisory-2006.160.html

Exit mobile version