CVE ID:	CVE-2006-5397
Description:	The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak that allows local users to read files specified by the XCOMPOSEFILE environment variable via the duplicate file descriptor.
Test IDs:	1.3.6.1.4.1.25623.1.0.57630
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-5397 BugTraq ID: 20845 http://www.securityfocus.com/bid/20845 http://www.mandriva.com/security/advisories?name=MDKSA-2006:199 http://secunia.com/advisories/22642 http://secunia.com/advisories/22749 http://www.vupen.com/english/advisories/2006/4289 XForce ISS Database: libx11-xinput-information-disclosure(29956) https://exchange.xforce.ibmcloud.com/vulnerabilities/29956