Solaris 9 (x86) : 124831-01

X11 6.6.1x86: xdm patch. Date this patch was last updated by Sun : Jan/18/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 124457-03 (deprecated)

X11 6.6.2: xdm patch. Date this patch was last updated by Sun : Jul/16/10 This plugin has been deprecated and either replaced with individual 124457 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

CVE-2006-5215

CVE-2006-5215 describes a local vulnerability in the Xsession script used by XDM across NetBSD, X.Org, and Solaris up to certain dates. The issue arises from a symlink attack on /tmp/xses-$USER, allowing a local user to overwrite arbitrary files or read another user’s Xsession errors file. Connec...