CVE-2002-1472: XFREE86 Project x11r6

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users to gain root privileges via a modified LD_PRELOAD environment variable that points to a malicious module.

Affected products

• XFREE86 Project x11r6: version 4.1.0 only; version 4.2.0 only

Published 2003-03-03. Last modified 2026-06-16.