CVE-2001-1086

XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack...

XFree86 X11R6 3.3 XDM - Session Cookie Guessing

XFree86 X11R6 3.3 XDM - Session Cookie Guessing // source: https://www.securityfocus.com/bid/2985/info xdm is the X Display Manager, a component of the XFree86 package. xdm manages the display of X sessions both locally and remotely. An xdm server compiled without WrapHelp.c is vulnerable to a...

XFree86-xfs-4.0.1-1 DoS

Hello, xfs from the package XFree86-xfs-4.0.1-1 i386.rpm, RedHat 7.0 seems to suffer from a Denial of Service attack. To cause xfs to stop responding for requests, try to do the fillowing: $ telnet victim xfs /dev/urandom Repeat about 100 or 1000 times and you get Connection refused message...

CVE-2000-0504

CVE-2000-0504 affects the XFree86 suite, specifically the libICE component. The issue arises when processing an unvalidated, large value in the SKIP_STRING macro, allowing remote attackers to cause a denial of service. The available documents identify the vulnerable software as libICE in XFree86 ...

[SECURITY] [DSA-030-1] Multiple security problems in X

Package : xfree86-1 Vulnerability : buffer overflow, insecure tempfile handling, denial-of-service attack Debian-specific: no Chris Evans, Joseph S. Myers, Michal Zalewski, Alan Cox, and others have noted a number of problems in several components of the X Window System sample implementation from...

FreeBSD-SA-01:07.xfree86

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:07 Security Advisory FreeBSD, Inc. Topic: Multiple XFree86 3.3.6 vulnerabilities Category: ports Module: XFree86-3.3.6, XFree86-aoutlibs Announced: 2001-01-23 Credits:...

scx-sa-11.txt

============================================================================= Securax-SA-11 Security Advisory belgian.networking.security Dutch ============================================================================= Topic: X-windows can be caused to freeze. Announced: 2000-12-26 Affects:...

CVE-2000-0285

The CVE-2000-0285 entry describes a buffer overflow in XFree86 3.3.x that allows a local user to execute arbitrary commands via a long -xkbmap parameter. Affected software is XFree86 3.3.x; the vulnerability stems from improper handling of the -xkbmap argument, enabling local privilege compromise...

CVE-2000-0285

Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter...

CVE-2000-0453

XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000...

CVE-2000-0453

XFree86 3.3.x and 4.0 are affected by a DoS due to a negative counter value in a malformed TCP packet sent to port 6000. The root cause is a malformed/negative counter handling in the TCP processing. Practical impact is denial of service as described; no exploitation details are provided in the d...

FreeBSD-SA-00:27.XFree86-4

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:27 Security Advisory FreeBSD, Inc. Topic: XFree86-4.0 port contains local root overflow Category: ports Module: Xfree86-4 Announced: 2000-07-05 Credits: Michal Zalewski...

Дырки в XFree86

Многочисленные дырки, в том числе связанные с переполнением буфера, могут оказаться достаточно опасными...

CVE-2000-0504

libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIPSTRING macro...

Nasty XFree Xserver DoS

Hi, Here's a very interesting DoS which I discovered against XFree86-3.3.5. I've had confirmation it also affects 3.3.6 and 4.0 with a small difference, see below SUMMARY ======= Remote users can, by sending a malformed packet to port 6000 TCP, cause a victim X server to freeze for a couple of...

CVE-2000-0453

XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000...

XFree86 X11R6 3.3.53.3.64.0 Xserver - Denial of Service

XFree86 X11R6 3.3.53.3.64.0 Xserver - Denial of Service / source: https://www.securityfocus.com/bid/1235/info A denial of service exists in XFree86 3.3.5, 3.3.6 and 4.0. A remote user can send a malformed packet to the TCP listening port, 6000, which will cause the X server to be unresponsive for...

XFree86 X11R6 3.3.5/3.3.6/4.0 Xserver - Denial of Service

/ source: https://www.securityfocus.com/bid/1235/info A denial of service exists in XFree86 3.3.5, 3.3.6 and 4.0. A remote user can send a malformed packet to the TCP listening port, 6000, which will cause the X server to be unresponsive for some period of time. During this time, the keyboard wil...

XFree86 server overflow - exploit issues

While trying to exploit this overflow, I noticed that the problem lies in lovely strcpy call, which overwrites stack. Unfortunately, any 'offending' non-alphanumeric characters are replaced with '' somewhere before. Uh, most of people will say "it's impossible to write alphanumeric shellcode, so ...

XFree86 server overflow

XFree86 3.3.6 and probably 4.0.0 as well ; - by running X server no matter it's setuid, or called from setuid Xwrapper - works in both cases, seems to me Xwrapper in default RH 6.x distro is rather dumb ; with -xkbmap parameter and over 2100 of 'A's or shellcode, again, it's rather trivial to...