high7.5Public exploit code
CVE-2001-1086
XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- XFree86 X11R6 3.3 XDM - Session Cookie Guessing2001-06-24 · remote · unix · Verified
Impact
XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xfree86 Project | X11r6 | Versions 3.3, 3.3.3 |
References
- NVD record
- CVE.org record
- http://online.securityfocus.com/archive/1/195008
- http://www.securityfocus.com/archive/1/194907
- http://www.securityfocus.com/bid/2985
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6808
- http://online.securityfocus.com/archive/1/195008
- http://www.securityfocus.com/archive/1/194907
- http://www.securityfocus.com/bid/2985
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6808