Debian DSA-1376-1 : kdebase - programming error

iKees Huijgen discovered that under certain circumstances KDM, an X session manager for KDE, could be tricked into allowing user logins without a password. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securi...

[SECURITY] [DSA 1376-1] New kdebase packages fix authentication bypass

------------------------------------------------------------------------ Debian Security Advisory DSA-1376 [email protected] http://www.debian.org/security/ Steve Kemp September 21, 2007 http://www.debian.org/security/faq -...

DSA-1376-1 kdebase - programming error

Bulletin has no description...

Mandrake Linux Security Advisory : gdm (MDKSA-2007:169)

A vulnerability was discovered in how gdm listens on its unix domain socket. A local user could crash a running X session by writing malicious data to gdm's unix domain socket. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

USN-364-1: Xsession vulnerability

A race condition existed that would allow other local users to see error messages generated during another user's X session. This could allow potentially sensitive information to be leaked...

DEBIAN-CVE-2006-5214

Race condition in the Xsession script, as used by X Display Manager xdm in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession...

CVE-2006-0612

Powersave daemon before 0.10.15.2 allows local users to gain privileges unauthorized access to an X session via unspecified vectors. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information...

Information disclosure

Powersave daemon before 0.10.15.2 allows local users to gain privileges unauthorized access to an X session via unspecified vectors. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information...

CVE-2006-0612

Powersave daemon before 0.10.15.2 allows local users to gain privileges unauthorized access to an X session via unspecified vectors. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information...

CVE-2006-0612

Powersave daemon before 0.10.15.2 allows local users to gain privileges unauthorized access to an X session via unspecified vectors. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information...

CVE-2006-0612

CVE-2006-0612 involves the Powersave daemon prior to version 0.10.15.2, which allows local users to gain privileges (unauthorized access to an X session). The connected sources confirm the affected component and the local-privilege impact, but do not provide concrete exploit vectors or remediatio...

CVE-2004-0390

SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods...

CVE-2004-0390

SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods...

pam_xauth may insecurely forward "X MIT-Magic-Cookies" to new sessions

Overview A vulnerability exists in pamxauth that may allow a local attacker to gain access to an administrator's X session. Description pamxauth is used to forward xauth keys or cookies between users. From the pamxauth man page:Without pamxauth, when xauth is enabled and a user uses the su comman...

Gnome 1.01.1 Group X 11.0 XFree86 X11R6 3.3.x4.0 - Denial of Service

Gnome 1.01.1 Group X 11.0 XFree86 X11R6 3.3.x4.0 - Denial of Service // source: https://www.securityfocus.com/bid/1369/info A denial of service vulnerability exists in libICE, part of the X11 windowing system. Any libICE application which creates inet listening sockets can be remotely crashed. Th...