Home
Corporate Website
Jobs
Updated
Mailing Lists
RSS
Blog
Online Shop
Advertise
Software Inspectors
Scan Online
Personal (PSI)
Network (NSI 2.0)
Solutions For
Security Professionals
Security Vendors
Free Solutions For
Open Communities
Journalists & Media
Secunia Advisories
Search
Historic Advisories
Listed By Product
Listed By Vendor
Statistics / Graphs
Secunia Research
Report Vulnerability
About Advisories
Virus Information
Chronological List
Last 10 Virus Alerts
About Virus Information
Secunia Customers
Customer Area
XFree86 "DBE" and "Render" Extensions Vulnerabilities
Secunia Advisory:
SA23684
Release Date:
2007-01-10
Critical:
Less critical
Impact:
Privilege escalation
Where:
Local system
Solution Status:
Unpatched
Software:
XFree86 4.1.x
XFree86 4.2.x
XFree86 4.3.x
XFree86 4.4.x
XFree86 4.5.x
XFree86 4.6.x
CVE reference:
CVE-2006-6101
(Secunia mirror)
CVE-2006-6102
(Secunia mirror)
CVE-2006-6103
(Secunia mirror)
This advisory is currently marked as unpatched!
-
Companies can be alerted when a patch is released!
Description
:
Sean Larsson has reported some vulnerabilities in XFree86, which can be exploited by malicious, local users to gain escalated privileges.
For more information:
SA23670
Solution
:
Do not load the "DBE" or "Render" extension. Restrict access to trusted users only.
Provided and/or discovered by
:
Sean Larsson, iDefense Labs
Original Advisory
:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=463
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=464
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=465
Other References
:
SA23670:
http://secunia.com/advisories/23670/
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
9 Related Secunia Security Advisories
1.
XFree86 X Font Server Multiple Vulnerabilities
2.
XFree86 Multiple Vulnerabilities
3.
XFree86 CID Encoded Fonts Integer Overflows
4.
XFree86 PCF Integer Overflow Vulnerabilities
5.
XFree86 Pixmap Creation Integer Overflow Vulnerability
6.
XFree86 Multiple Vulnerabilities
7.
XFree86 "font.alias" File Parsing Privilege Escalation Vulnerabilities
8.
XFree Weak Session Cookies
9.
XFree86 Multiple Integer Overflow Vulnerabilities
Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our
web form
or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
Secunia PSI
Scan | Patch | Track
Free Download
Secunia Poll
Do you think it's important to read Setup/User Guides for applications for use within your network?
Yes, I do it all the time
Yes, but I do it rarely
No
See Results
Most Popular Advisories
1.
Mozilla Firefox Multiple Vulnerabilities
2.
Opera for Windows Unspecified Code Execution
3.
VLC Media Player WAV Processing Integer Overflow
4.
Mozilla Thunderbird Multiple Vulnerabilities
5.
PCRE pcre_compile.c Buffer Overflow Vulnerability
6.
GNOME Glib PCRE pcre_compile.c Buffer Overflow Vulnerability
7.
Fedora update for glib2
8.
FreeStyle Wiki Cross-Site Scripting Vulnerability
9.
UnixWare ReliantHA Privilege Escalation Vulnerabilities
10.
zlib Denial of Service Vulnerability
Vulnerability Management
-
Terms & Conditions
-
Copyright 2002-2008 Secunia
-
Compliance
-
Contact Secunia
