CVE:CVE-2006-4447
CNNVD:CNNVD-200608-478
X.Org是X.Org基金会运作的一个对X Window系统的官方参考实现，是开源的自由软件。
X.Org在处理权限放弃操作时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。
X.Org没有检查setuid()或类似的调用是否成功。如果由于"maximum processes"ulimit的限制导致调用失败的话，就会导致进程以root用户权限执行某些特权操作(文件访问)。
solution:Upgrade x.org emu-linux-x87-xlibs to a higher version than 7.0_r1,and avoid the version 7.0_r1; Upgrade x.org x11r6 to a higher version than 6.7.0,6.8,6.8.1,6.8.2,and avoid the version 6.7.0,6.8,6.8.1,6.8.2; Upgrade x.org x11r7 to a higher version than 1.0,1.0.1,1.0.2,and avoid the version 1.0,1.0.1,1.0.2; Upgrade x.org xdm to a higher version than 1.0.3,and avoid the version 1.0.3; Upgrade x.org xf86dga to a higher version than 1.0.0,and avoid the version 1.0.0; Upgrade x.org xinit to a higher version than 1.0.2_r5,and avoid the version 1.0.2_r5; Upgrade x.org xload to a higher version than 1.0.0,and avoid the version 1.0.0; Upgrade x.org xorg-server to a higher version than 1.02_r5,and avoid the version 1.02_r5; Upgrade x.org xterm to a higher version than 214,and avoid the version 214