Description
Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | xdm | 1:1.0.5-1 | — |
| Debian 14 | xorg | 1:7.1.0-13 | — |
| Debian 13 | xdm | 1:1.0.5-1 | — |
| Debian 13 | xorg | 1:7.1.0-13 | — |
| Debian 12 | xdm | 1:1.0.5-1 | — |
| Debian 12 | xorg | 1:7.1.0-13 | — |
References
- 1017015 vdb-entry
- 22992 third-party-advisory
- https://bugs.freedesktop.org/show_bug.cgi?id=5897
- ADV-2006-3962 vdb-entry
- 22469 third-party-advisory
- oval:org.mitre.oval:def:1760 vdb-entry signature
- 22323 third-party-advisory
- 20400 vdb-entry
- 102652 vendor-advisory
- USN-364-1 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm
- 22439 third-party-advisory
- http://www.netbsd.org/cgi-bin/query-pr-single.pl?number=32804