Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - libX11、xdm、xf86dga、xinit、xload、xtrans、および xterm を含む X.Org および XFree86 は、権限の破棄を試みた際に setuid および seteuid 呼び出しの戻り値をチェックしません。これにより、ローカルユーザーが権限を取得できる恐れがあります。これらの呼び出しは、ulimit の超過などして失敗します。CVE-2006-4447

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - X.Org 和 XFree86 包括 libX11、xdm、xf86dga、xinit、xload、xtrans 和 xterm 在尝试终止权限时未检查 setuid 和 seteuid 调用的返回值这可允许本地用户获得权限使这些调用失败例如通过超过 ulimit。 (CVE-2006-4447)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.

In practice, it is unlikely that these programs have any real-world vulnerability. The X binary is the only one shipped suid. Further analysis of the code in question shows that it's highly unlikely that this can be exploited. Patched updates are provided as a precaution nonetheless.

Updated packages are patched to address this issue.

The remote host is affected by the vulnerability described in GLSA-200704-22 (BEAST: Denial of Service)

    BEAST, which is installed as setuid root, fails to properly check     whether it can drop privileges accordingly if seteuid() fails due to a     user exceeding assigned resource limits.
  Impact :

    A local user could exceed his resource limit in order to prevent the     seteuid() call from succeeding. This may lead BEAST to keep running     with root privileges. Then, the local user could use the 'save as'     dialog box to overwrite any file on the vulnerable system, potentially     leading to a Denial of Service.
  Workaround :

    There is no known workaround at this time.

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - X.Org 和 XFree86 (包括 libX11、xdm、xf86dga、xinit、xload、xtrans 和 xterm) 在嘗試放置權限時未檢查 setuid 和 seteuid 呼叫的傳回值其可能允許本機使用者透過造成呼叫失敗，例如超過 ulimit。 (CVE-2006-4447)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

The remote host is affected by the vulnerability described in GLSA-200608-25 (X.org and some X.org libraries: Local privilege escalations)

    Several X.org libraries and X.org itself contain system calls to     set*uid() functions, without checking their result.
  Impact :

    Local users could deliberately exceed their assigned resource limits     and elevate their privileges after an unsuccessful set*uid() system     call. This requires resource limits to be enabled on the machine.
  Workaround :

    There is no known workaround at this time.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the     return values for setuid and seteuid calls when attempting to drop privileges, which might allow local     users to gain privileges by causing those calls to fail, such as by exceeding a ulimit. (CVE-2006-4447)

Note that Nessus relies on the presence of the package as reported by the vendor.

Several vulnerabilities have been discovered in the X Window System, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2006-3467     Chris Evan discovered an integer overflow in the code to     handle PCF fonts, which might lead to denial of service     if a malformed font is opened.

  - CVE-2006-3739     It was discovered that an integer overflow in the code     to handle Adobe Font Metrics might lead to the execution     of arbitrary code.

  - CVE-2006-3740     It was discovered that an integer overflow in the code     to handle CMap and CIDFont font data might lead to the     execution of arbitrary code.

  - CVE-2006-4447     The XFree86 initialization code performs insufficient     checking of the return value of setuid() when dropping     privileges, which might lead to local privilege     escalation.

ID	名稱	產品	系列	已發布	已更新	嚴重性
254125	Linux Distros のパッチ未適用の脆弱性: CVE-2006-4447	Nessus	Misc.	2025/8/24	2025/9/2	high
254125	Linux Distros 未修补的漏洞：CVE-2006-4447	Nessus	Misc.	2025/8/24	2025/9/2	high
23904	Mandrake Linux Security Advisory : xorg-x11 (MDKSA-2006:160)	Nessus	Mandriva Local Security Checks	2006/12/16	2021/1/6	high
25110	GLSA-200704-22 : BEAST: Denial of Service	Nessus	Gentoo Local Security Checks	2007/4/30	2021/1/6	high
254125	Linux Distros 未修補的弱點：CVE-2006-4447	Nessus	Misc.	2025/8/24	2025/9/2	high
22287	GLSA-200608-25 : X.org and some X.org libraries: Local privilege escalations	Nessus	Gentoo Local Security Checks	2006/8/30	2021/1/6	high
254125	Linux Distros Unpatched Vulnerability : CVE-2006-4447	Nessus	Misc.	2025/8/24	2025/9/2	high
22734	Debian DSA-1193-1 : xfree86 - several vulnerabilities	Nessus	Debian Local Security Checks	2006/10/14	2021/1/4	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high