CVE-1999-0118

AIX infod allows local users to gain root access through an X display...

EUVD-2004-1344

Malware in sbrugna...

EUVD-1999-0118

Malware in sbrugna...

EUVD-1999-1220

Malware in sbrugna...

EUVD-2006-5200

Malware in sbrugna...

EUVD-2003-0542

Malware in sbrugna...

EUVD-2003-0543

Malware in sbrugna...

EUVD-2006-5199

Malware in sbrugna...

xorg-x11-server: XkbGetKbdByName use-after-free

A vulnerability was found in X.Org. This issue occurs because the XkbCopyNames function leaves a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests. This flaw can lead to local privilege elevation on systems where the X server runs...

SUSE CVE-2004-0419

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions...

SUSE CVE-2008-1483

OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 IPv4 and sniffing a cookie sent by Emacs...

SUSE CVE-2015-8316

Array index error in LightDM aka Light Display Manager 1.14.3, 1.16.x before 1.16.6 when the XDMCP server is enabled allows remote attackers to cause a denial of service process crash via an XDMCP request packet with no address...

SDDM Competitive Conditions Issue Vulnerability

SDDM is a Qt-based display manager for the desktop environments KDE and LXQt from the SSDM team. A contention condition issue vulnerability exists in versions of SDDM prior to 0.19.0. The vulnerability stems from incorrectly starting the X server in a way that would allow a local, unprivileged us...

UBUNTU-CVE-2017-14482

GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data containing an x-display XML element that specifies execution of shell commands, related to an unsafe text/enriched extension in lisp/textmodes/enriched.el, and unsafe...

UBUNTU-CVE-2015-8316

Array index error in LightDM aka Light Display Manager 1.14.3, 1.16.x before 1.16.6 when the XDMCP server is enabled allows remote attackers to cause a denial of service process crash via an XDMCP request packet with no address...

DEBIAN-CVE-2015-8308

LXDM before 0.5.2 did not start X server with -auth, which allows local users to bypass authentication with X connections...

Ubuntu 16.10 / 16.04 LTS - LightDM Guest Account Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits Source: https://blogs.securiteam.com/index.php/archives/3134 Vulnerability Summary The following advisory describes a local privilege escalation via LightDM found in Ubuntu versions 16.10 / 16.04 LTS. Ubuntu is an open source software platform...

LightDM (Ubuntu 16.04/16.10) - 'Guest Account' Local Privilege Escalation

Source: https://blogs.securiteam.com/index.php/archives/3134 Vulnerability Summary The following advisory describes a local privilege escalation via LightDM found in Ubuntu versions 16.10 / 16.04 LTS. Ubuntu is an open source software platform that runs everywhere from IoT devices, the smartphone...

[SECURITY] Fedora 26 Update: libXdmcp-1.1.2-5.fc26

X Display Manager Control Protocol library...

[SECURITY] Fedora 24 Update: libXdmcp-1.1.2-5.fc24

X Display Manager Control Protocol library...