bk99.de entertain the web since 1997

bk99.de
g · SecurityCurated

Security holes in the X.org X server

Summary

In January 2007 the X.org X server contained several integer overflow holes in the DBE module and the Render extension, affecting all versions since X.org 6.8.2. Faulty parameters could overwrite memory even outside the affected functions. This could only be exploited by an already authenticated client, and patches were available.

Ideas

  • Integer overflows lead to wrong memory sizes and thus to memory corruption.
  • The damage can hit distant parts of memory.
  • Authentication to the X server limited the circle of possible attackers.

Insights

  • An X server with root privileges turns every memory hole into a system risk.
  • Authentication lowers the risk but does not remove the cause.

Facts

  • Patches were available from freedesktop.org.

References

Critique

  • The report names no CVE identifiers, which makes matching with distribution updates harder.

Remarks

  • Modern distributions run the X server without root privileges or replace it with Wayland.

Recommendations

  • Use Wayland or a rootless X server where possible.
  • Do not allow X connections from the network; use SSH forwarding if needed.

Read the original article

Search the Web Archive

g · 2025

Partly critical router holes endanger industrial networks

In January 2025 the industrial network equipment supplier Moxa warned of two holes in routers and security appliances used, among other places, in energy facilities. CVE-2024-9138 is based on hard-coded credentials and gives authenticated attackers root privileges; the critical CVE-2024-9140 allows system commands to be injected. Firmware updates were available for several model series, while for others there were only workarounds or a referral to support.

g · 2023

Cisco warns of security holes it will not patch

In January 2023 Cisco warned of critical holes in the small business routers RV016, RV042, RV042G and RV082, but announced that it would not deliver any more updates. Manipulated HTTP requests to the web interface could bypass authentication and gain root access (CVE-2023-20025). As the devices had reached end of life, Cisco only pointed to blocking ports 443 and 60443, although proof-of-concept code already existed.

g · 2018

Lenovo admits security holes in Fingerprint Manager

In January 2018 Lenovo admitted holes in its Fingerprint Manager Pro software, which managed biometric data on computers running Windows 7, 8 and 8.1. The software used a weak encryption algorithm, contained a hard-coded password and was accessible to local users without special rights. Windows 10 was not affected because Windows Hello takes over the function there.