CVE-2006-0745: Mandrakesoft Mandrake Linux

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and (1) execute arbitrary code via the -modulepath command line option or (2) overwrite arbitrary files via -logfile.

Affected products

• Mandrakesoft Mandrake Linux: version 2006 only
• Red Hat Fedora Core: version core_5.0 only
• Sun Solaris: version 10.0 only
• Suse Suse Linux: version 10.0 only
• X.org x11r6: version 6.9 only
• X.org x11r7: version 1.0 only; version 1.0.1 only

Published 2006-03-21. Last modified 2026-06-16.