[patch] xorg-server-1.0.1-CVE-2006-0745.patch

xorg-server-1.0.1-CVE-2006-0745.patch (text/plain), 715 bytes, created by Donnie Berkholz (RETIRED) on 2006-03-16 00:26:21 UTC

Fix a local denial of service and arbitrary code execution as root.

--- xc.orig/programs/Xserver/hw/xfree86/common/xf86Init.c	2006-03-14 22:45:46.000000000 -0800
+++ xc/programs/Xserver/hw/xfree86/common/xf86Init.c	2006-03-14 22:46:06.000000000 -0800
@@ -1376,7 +1376,7 @@
     }
   
   /* First the options that are only allowed for root */
-  if (getuid() == 0 || geteuid != 0)
+  if (getuid() == 0 || geteuid() != 0)
   {
     if (!strcmp(argv[i], "-modulepath"))
     {
@@ -1679,7 +1679,7 @@
   }
   if (!strcmp(argv[i], "-configure"))
   {
-    if (getuid() != 0 && geteuid == 0) {
+    if (getuid() != 0 && geteuid() == 0) {
 	ErrorF("The '-configure' option can only be used by root.\n");
 	exit(1);
     }