Skip to content
Fencer Vulns
high 7.2

CVE-2006-4447 json

X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid…

published 2006-08-30 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-4435

cvss
7.2
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 39%
public exploits
0
none known

Summary

X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.

Patch / fix

  • xdm Debian 14, Debian 13, Debian 12 1:1.0.5-1
  • libx11 Debian 14, Debian 13, Debian 12 2:1.0.0-7
  • xtrans Debian 14, Debian 13, Debian 12 1.0.0-6
  • xorg-server Debian 14, Debian 13, Debian 12 1:1.0.2-9

debian advisories DEBIAN-CVE-2006-4447

Exploit prediction

0.45% chance of exploitation in the next 30 days, higher than 39% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 2.0 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.