Weaknesses in MIT magic cookie and XDM X Windows authorization

Overview MIT magic cookie and XDM authorization contain vulnerabilities that could allow remote attackers to connect to X displays. Description Two widely used X Window System authorization schemes have weaknesses in their sample implementations. MIT-MAGIC-COOKIE-1 On some systems built without t...

CVE-2001-0191

Summary: CVE-2001-0191 affects gnuserv prior to 3.12 (shipped with XEmacs). The issue arises from improper checking of the length of the X Windows MIT-MAGIC-COOKIE, enabling remote attackers to execute arbitrary commands via a buffer overflow or to brute-force authentication with a short cookie l...