CVE-2006-5214

Publication date 10 October 2006

Last updated 17 July 2025

Ubuntu priority

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user’s Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
xinit	7.04 feisty	Ignored end of life, was needed
	6.10 edgy	Ignored end of life, was needed
	6.06 LTS dapper	Fixed 1.0.1-0ubuntu3.1
xorg	7.04 feisty	Fixed 7.1.1ubuntu6
	6.10 edgy	Fixed 7.1.1ubuntu6
	6.06 LTS dapper	Ignored end of life, was needed

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-364-1
Xsession vulnerability
16 October 2006

Other references

https://www.cve.org/CVERecord?id=CVE-2006-5214