CVE-2006-6730
- State
- Published
- Severity
- Not scored
- Published
- Dec 26, 2006
- Updated
- Aug 7, 2024
- Reserved
- Dec 26, 2006
Description
OpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev/xf86 device, which allows local users with root privileges to reduce securelevel by replacing the System Management Mode (SMM) handler via a write to an SMRAM address within /dev/xf86 (aka the video card memory-mapped I/O range), and then launching the new handler via a System Management Interrupt (SMI), as demonstrated by a write to Programmed I/O port 0xB2.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20061215 Re: The (in)security of Xorg and DRImailing-list
- [Xorg] 20040613 DRI mergingmailing-list
- 20061218 Re: The (in)security of Xorg and DRImailing-list
- http://www.ssi.gouv.fr/fr/sciences/fichiers/lti/cansecwest2006-duflot-paper.pdf
- http://www.cansecwest.com/slides06/csw06-duflot.ppt
- 20061214 The (in)security of Xorg and DRImailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.