medium4.6
CVE-2000-1060
The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allo…
Impact
The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xfree86 Project | Xfce | Version 3.5.1 |