dtlogin buffer overflow

Buffer overflow during XDMCP parsing...

CVE-2004-0368

Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet...

CVE-2004-0368

CVE-2004-0368 is a double-free vulnerability in the CDE dtlogin daemon that can allow remote code execution with root privileges via crafted XDMCP packets. Affected platforms include Solaris and HP-UX (and related CDE environments), with multiple patches issued (Solaris patches 108920-30 / 108919...

Common Desktop Environment (CDE) dtlogin XDMCP parser improperly deallocates memory

Overview A "double-free" vulnerability in the CDE dtlogin program could allow a remote attacker to execute arbitrary code or cause a denial of service on a vulnerable system. Description The Common Desktop Environment CDE is an integrated graphical user interface that runs on UNIX and Linux...

CVE-2003-0549

The X Display Manager Control Protocol XDMCP support for GDM before 2.4.1.6 allows attackers to cause a denial of service daemon crash via a short authorization key name...

CVE-2003-0548

GDM (GNOME Display Manager) vulnerable to DoS via XDMCP in versions before 2.4.1.6. The issue affects the XDMCP handling and may cause the daemon to crash when certain authorization data or host expiry conditions are encountered. Public descriptions indicate the two related CVEs (CVE-2003-0548 an...

CVE-2003-0549

CVE-2003-0549 affects the GNOME Display Manager (GDM) prior to version 2.4.1.6, where the XDMCP feature can be abused to crash the gdm daemon, causing DoS via a short authorization key name. Public records in NVD and vendor advisories describe the issue as stemming from XDMCP handling, with the r...

Low: Red Hat Security Advisory: : GDM allows local user to read any file.

Updated GDM packages are available which correct a bug allowing local users to read any text files on the system, and a denial of service issue if XDMCP is enabled. GDM is the GNOME Display Manager for X. Versions of GDM prior to 2.4.1.6 contain a bug where GDM will run as root when examining the...

Переполнение буфера в gdm (buffer overflow)

Remote root при обработке XDMCP запрещен по-умолчанию...

MDKSA-2001:070 - gdm update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: gdm Date: August 20th, 2001 Advisory ID: MDKSA-2001:070 Affected versions: 8.0 Problem Description: A buffer overrun exists in the XDMCP handling code used in gdm. By sending a properly crafted XDM...

CVE-2000-0374

The CVE describes that the default configuration of kdm (Caldera/Mandrake Linux and possibly others) allows XDMCP connections from any host, causing information leakage and potential bypass of access restrictions. CERT/CC notes this as an information leakage vulnerability via XDMCP daemon default...

CVE-2000-0374

The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions...

CVE-2000-0668

CVE-2000-0668 affects the Linux pam_console PAM module when a display manager (gdm or kdm) has XDMCP enabled. The vulnerability allows a user to access the system console and reboot the system, with a Medium severity (CVSS v2 base score 5.0) and a Partial availability impact. The provided sources...

CVE-2000-0668

pamconsole PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled...

CVE-2000-0668

pamconsole PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled...

Conectiva 4.x/5.x / RedHat 6.x - pam_console Remote User

source: https://www.securityfocus.com/bid/1513/info There is a vulnerability in the Linux pamconsole module that could allow an attacker to remotely reboot the workstation or perform other actions limited to local users. If a workstation is configured to use a display manager xdm, gdm, kdm, etc...

Conectiva 4.x5.x RedHat 6.x - pam_console Remote User

Conectiva 4.x5.x RedHat 6.x - pamconsole Remote User source: https://www.securityfocus.com/bid/1513/info There is a vulnerability in the Linux pamconsole module that could allow an attacker to remotely reboot the workstation or perform other actions limited to local users. If a workstation is...

CVE-2000-0491

Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARDQUERY request...

XFree86: xdm flaw; present in kdm

Hi, Just a minor one this. Discovered during a 5 minute pass of "xdm". I subsequently discovered "kdm" has copied the xdm core xdmcp code. I'm posting this because I think Caldera released an advisory, but a general discussion of the problem did not yet appear on Bugtraq. Further audit of kdm/xdm...

XFree86: Various nasty libX11 holes

Hi, I'll summarize the impact and recommendations before I paste a mail which goes into technical details of the flaws. SUMMARY ======= Various coding flaws exist in libX11. Whilst this may not sound too serious, it is, for two reasons. They are 1 Various X client programs foolishly have privileg...