Detections
Analytics
FreeBSD : xorg -- multiple vulnerabilities (fe2b6597-c9a4-11dc-8da8-0008a18a9961)
high Nessus Plugin ID 30088
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
Matthieu Herrb of X.Org reports :Several vulnerabilities have been identified in server code of the X window system caused by lack of proper input validation on user controlled data in various parts of the software, causing various kinds of overflows.
Exploiting these overflows will crash the X server or, under certain circumstances allow the execution of arbitrary machine code.
When the X server is running with root privileges (which is the case for the Xorg server and for most kdrive based servers), these vulnerabilities can thus also be used to raise privileges.
All these vulnerabilities, to be exploited succesfully, require either an already established connection to a running X server (and normally running X servers are only accepting authenticated connections), or a shell access with a valid user on the machine where the vulnerable server is installed.
Solution
Update the affected packages.See Also
https://lists.freedesktop.org/archives/xorg/2008-January/031918.html
https://lists.freedesktop.org/archives/xorg/2008-January/032099.html
Plugin Details
Severity: High
ID: 30088
File Name: freebsd_pkg_fe2b6597c9a411dc8da80008a18a9961.nasl
Version: 1.19
Type: local
Family: FreeBSD Local Security Checks
Published: 1/27/2008
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:libxfont, p-cpe:/a:freebsd:freebsd:xorg-server, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 1/23/2008
Vulnerability Publication Date: 1/18/2008
Exploitable With
Core Impact
Reference Information
CVE: CVE-2007-5760, CVE-2007-5958, CVE-2007-6427, CVE-2007-6428, CVE-2007-6429, CVE-2008-0006