Xfree86 Project X11R6 vulnerabilities

CVE-2001-1179 [HIGH] CVE-2001-1179: xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose fil xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters.

CVE-2001-0955 [HIGH] CVE-2001-0955: Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, a Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to cause a denial of service and possibly gain privileges via a large number of characters, possibly through the web page search form of KDE Konqueror or from an xterm command with a long title.

CVE-2004-0106 [HIGH] CVE-2004-0106: Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font fil Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084.

CVE-2000-0620 [MEDIUM] CVE-2000-0620: libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, whic libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop.

CVE-2003-0071 [LOW] CVE-2003-0071: The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop.