X.org Xdm vulnerabilities

2 CVEs affecting X.org Xdm, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-5215, published 2006-10-10.

More from X.org.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-4447, published 2006-08-30. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow…
• CVE-2006-5215, published 2006-10-10. Low severity, CVSS 2.6. EPSS: 0.3% chance of exploitation in the next 30 days. The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or…