Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2009-1756HistoryMay 22, 2009 - 11:52 a.m.
CVE-2009-1756
2009-05-2211:52:00
Debian Security Bug Tracker
security-tracker.debian.org
8
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.3%
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | slim | < 1.3.1-2 | slim_1.3.1-2_all.deb |
| Debian | 11 | all | slim | < 1.3.1-2 | slim_1.3.1-2_all.deb |
| Debian | 10 | all | slim | < 1.3.1-2 | slim_1.3.1-2_all.deb |
| Debian | 999 | all | slim | < 1.3.1-2 | slim_1.3.1-2_all.deb |
| Debian | 13 | all | slim | < 1.3.1-2 | slim_1.3.1-2_all.deb |
Related
openvas
openvas
Fedora Update for slim FEDORA-2009-13552
2010-01-15 00:00:00
Fedora Update for slim FEDORA-2009-13551
2010-01-15 00:00:00
Fedora Update for slim FEDORA-2009-13551
2010-01-15 00:00:00
freebsd
freebsd
slim -- local disclosure of X authority magic cookie
2009-05-20 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: slim-1.3.1-9.fc11
2010-01-02 03:28:15
[SECURITY] Fedora 12 Update: slim-1.3.1-9.fc12
2010-01-02 03:29:37
[SECURITY] Fedora 12 Update: slim-1.3.2-2.fc12
2010-09-09 01:15:33
cve
cve
CVE-2009-1756
2009-05-22 11:52:00
prion
prion
Command injection
2009-05-22 11:52:00
nessus
nessus
FreeBSD : slim -- local disclosure of X authority magic cookie (80f13884-4d4c-11de-8811-0030843d3802)
2009-06-01 00:00:00
Fedora 12 : slim-1.3.1-9.fc12 (2009-13552)
2010-02-25 00:00:00
Fedora 11 : slim-1.3.1-9.fc11 (2009-13551)
2010-02-25 00:00:00
ubuntucve
ubuntucve
CVE-2009-1756
2009-05-22 00:00:00
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.3%
Related for DEBIANCVE:CVE-2009-1756