Rapid7 Vulnerability & Exploit Database

ELSA-2007:0002 Important: Enterprise Linux XFree86 security update

Free InsightVM Trial No credit card necessary

Watch Demo See how it all works

Back to Search

ELSA-2007:0002 Important: Enterprise Linux XFree86 security update

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Published

07/10/2006

Created

07/25/2018

Added

12/20/2011

Modified

04/11/2019

Description

The Dell Openmanage CD launches X11 and SSH daemons that do not require authentication, which allows remote attackers to gain privileges.

Solution(s)

oracle-linux-upgrade-xfree86
oracle-linux-upgrade-xfree86-100dpi-fonts
oracle-linux-upgrade-xfree86-75dpi-fonts
oracle-linux-upgrade-xfree86-base-fonts
oracle-linux-upgrade-xfree86-cyrillic-fonts
oracle-linux-upgrade-xfree86-devel
oracle-linux-upgrade-xfree86-doc
oracle-linux-upgrade-xfree86-font-utils
oracle-linux-upgrade-xfree86-iso8859-14-100dpi-fonts
oracle-linux-upgrade-xfree86-iso8859-14-75dpi-fonts
oracle-linux-upgrade-xfree86-iso8859-15-100dpi-fonts
oracle-linux-upgrade-xfree86-iso8859-15-75dpi-fonts
oracle-linux-upgrade-xfree86-iso8859-2-100dpi-fonts
oracle-linux-upgrade-xfree86-iso8859-2-75dpi-fonts
oracle-linux-upgrade-xfree86-iso8859-9-100dpi-fonts
oracle-linux-upgrade-xfree86-iso8859-9-75dpi-fonts
oracle-linux-upgrade-xfree86-libs
oracle-linux-upgrade-xfree86-libs-data
oracle-linux-upgrade-xfree86-mesa-libgl
oracle-linux-upgrade-xfree86-mesa-libglu
oracle-linux-upgrade-xfree86-sdk
oracle-linux-upgrade-xfree86-syriac-fonts
oracle-linux-upgrade-xfree86-tools
oracle-linux-upgrade-xfree86-truetype-fonts
oracle-linux-upgrade-xfree86-twm
oracle-linux-upgrade-xfree86-xauth
oracle-linux-upgrade-xfree86-xdm
oracle-linux-upgrade-xfree86-xfs
oracle-linux-upgrade-xfree86-xnest
oracle-linux-upgrade-xfree86-xvfb

References

https://attackerkb.com/topics/cve-2006-3467
APPLE-SA-2009-02-12
21968
577729
CVE - 2006-3467
CVE - 2006-3470
CVE - 2006-6101
DSA-1178
DSA-1193
DSA-1249
NetBSD-SA2007-002
OVAL10490
OVAL10673
RHSA-2006:0500
RHSA-2006:0634
RHSA-2006:0635
RHSA-2007:0002
RHSA-2007:0003
20060701-01-U
SUSE-SA:2006:045
SUSE-SA:2007:008
http://oss.oracle.com/pipermail/el-errata/2007-March/000103.html
27137
31337

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;