CVE-2006-5397
The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for...
The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak that allows local users to read files specified by the XCOMPOSEFILE environment variable via the duplicate file descriptor.
Exploit likelihood
What each source reports
NVD Score used
The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak that allows local users to read files specified by the XCOMPOSEFILE environment variable via the duplicate file descriptor.
- Record
CVE-2006-5397- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak that allows local users to read files specified by the XCOMPOSEFILE environment variable via the duplicate file descriptor.
- Record
CVE-2006-5397- Updated
- 2026-11-02
EUVDEUVD-2006-5382 No score
The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak that allows local users to read files specified by the XCOMPOSEFILE environment variable via the duplicate file descriptor.
- Record
EUVD-2006-5382- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mfr2-w78g-62fw No score
The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for...
The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak that allows local users to read files specified by the XCOMPOSEFILE environment variable via the duplicate file descriptor.
- Record
GHSA-mfr2-w78g-62fw- Updated
- 2026-11-02
OSVBELL-CVE-2006-5397
CVE-2006-5397 does not affect BellSoft software
- Record
BELL-CVE-2006-5397- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
OSV No score
The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak that allows local users to read files specified by the XCOMPOSEFILE environment variable via the duplicate file descriptor.
- Record
CVE-2006-5397- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-5397 No score
The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak that allows local users to read files specified by the XCOMPOSEFILE environment variable via the duplicate file descriptor.
- Record
DEBIAN-CVE-2006-5397- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5397 is a low vulnerability (CVSS 2.1) in X.org Libx11, published November 3, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. Fixed in libx11 2:1.0.3-3.
References
secunia.com/advisories/22749
securityfocus.com/bid/20845
bugs.freedesktop.org/show_bug.cgi?id=8699
vupen.com/english/advisories/2006/4289
gitweb.freedesktop.org?p=xorg/lib/libX11.git%3Ba=commit%3Bh=686bb8b35acf6cecae80fe89b2b5853f5816ce19
Show 7 moreShow less
mandriva.com/security/advisories?name=MDKSA-2006:199
exchange.xforce.ibmcloud.com/vulnerabilities/29956
nvd.nist.gov/vuln/detail/CVE-2006-5397
github.com/advisories/GHSA-mfr2-w78g-62fw
docs.bell-sw.com/security/cves/CVE-2006-5397
security-tracker.debian.org/tracker/CVE-2006-5397