Weaknesses in MIT magic cookie and XDM X Windows authorization

Overview MIT magic cookie and XDM authorization contain vulnerabilities that could allow remote attackers to connect to X displays. Description Two widely used X Window System authorization schemes have weaknesses in their sample implementations. MIT-MAGIC-COOKIE-1 On some systems built without t...

Important: Red Hat Security Advisory: XFree86 security update

Updated XFree86 packages that resolve various security issues and additionally provide a number of bug fixes and enhancements are now available for Red Hat Enterprise Linux 2.1. XFree86 is an implementation of the X Window System, which provides the graphical user interface, video drivers, etc. f...

CVE-2002-1510

xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist...

CVE-2001-1086

The CVE-2001-1086 issue affects XFree86 versions 3.3 and 3.3.3 where XDM cookies created via gettimeofday() with HasXdmXauth are easily guessable, allowing remote attackers to access the X display by brute forcing cookies. Supported by the provided records: partial confidentiality, integrity, and...

CVE-2001-1086

XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack...

CVE-2001-1086: Undefined Security Weakness

XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack...