CVE-2009-2697

The Red Hat build script for the GNOME Display Manager GDM before 2.16.0-56 on Red Hat Enterprise Linux RHEL 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079...

CVE-2009-2697

The Red Hat build script for the GNOME Display Manager GDM before 2.16.0-56 on Red Hat Enterprise Linux RHEL 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079...

CVE-2009-2697

CVE-2009-2697 is a vulnerability in the GNOME Display Manager (gdm) where the 64-bit build omits TCP wrappers support, potentially allowing bypass of access restrictions over XDMCP. Publicized in RHSA-2010:0657 (RHEL 4/5 line) and ELSA-2009-1364 (Oracle Linux 5), with CentOS/Scientific Linux advi...

gdm not built with tcp_wrappers

The Red Hat build script for the GNOME Display Manager GDM before 2.16.0-56 on Red Hat Enterprise Linux RHEL 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079...

MDKA-2007:110 : kdebase

KDM users were unable to login remotelly using XDMCP, because of a bug in the consolekit support. This update package fixes the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Netwo...

Mandriva Update for gdm MDKA-2007:116 (gdm)

Check for the Version of gdm OpenVAS Vulnerability Test Mandriva Update for gdm MDKA-2007:116 gdm Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Mandriva Update for xdm MDVA-2008:128 (xdm)

Check for the Version of xdm OpenVAS Vulnerability Test Mandriva Update for xdm MDVA-2008:128 xdm Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Mandriva Update for kdebase MDKA-2007:110 (kdebase)

Check for the Version of kdebase OpenVAS Vulnerability Test Mandriva Update for kdebase MDKA-2007:110 kdebase Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[Full-disclosure] iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability

GNOME Foundation Display Manager gdmchooser Format String Vulnerability iDefense Security Advisory 12.14.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 14, 2006 I. BACKGROUND The gdmchooser program provides XDMCP X Display Manager Control Protocol functionality to the GNOME Display...

CVE-2002-2036

Sun Ray Server Software SRSS 1.3, when Non-Smartcard Mobility NSCM is enabled, allows remote attackers to login as another user by running dtlogin from a system that supports the XDMCP client...

CVE-2002-2036

Sun Ray Server Software (SRSS) 1.3 with Non-Smartcard Mobility (NSCM) enabled is affected. The issue allows remote attackers to log in as another user by running dtlogin on a system with XDMCP client support, indicating a network-exposed authentication bypass via XDMCP/X11 components. The core de...

AIX 5.2 : IY55360

The remote host is missing AIX Critical Security Patch number IY55360 DTLOGIN CORE DUMPS WITH SPECIFIC XDMCP REQUEST. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

CVE-2004-1347

The CVE-2004-1347 vulnerability affects X Display Manager (XDM) on Solaris 8. A remote attacker can cause a denial of service (XDM crash) by sending an invalid XDMCP request. Primary details in the connected documents confirm the affected component and the attack vector, noting the impact as DoS ...

CVE-2004-1347

X Display Manager XDM on Solaris 8 allows remote attackers to cause a denial of service XDM crash via an invalid X Display Manager Control Protocol XDMCP request...

Debian DSA-030-2 : xfree86

"Chris Evans, Joseph S. Myers, Michal Zalewski, Alan Cox, and others have noted a number of problems in several components of the X Window System sample implementation from which XFree86 is derived. While there are no known reports of real-world malicious exploits of any of these problems, it is...

Sun Solaris X Display Manager does not properly handle invalid XDMCP requests

Overview There is a vulnerability in the way Sun Solaris handles invalid X Display Manager Control Protocol XDMCP requests. Exploitation of this vulnerability could allow an attacker to cause the X Display Manager XDM to crash. Description The X Display Manager xdm1 is responsible for managing...

CVE-2004-1347

X Display Manager XDM on Solaris 8 allows remote attackers to cause a denial of service XDM crash via an invalid X Display Manager Control Protocol XDMCP request...

Mandrake Linux Security Advisory : gdm (MDKSA-2003:085)

Several vulnerabilities were discovered in versions of gdm prior to 2.4.1.6. The first vulnerability is that any user can read any text file on the system due to code originally written to be run as the user logging in was in fact being run as the root user. This code is what allows the examinati...

RHEL 2.1 : gdm (RHSA-2003:259)

Updated GDM packages are available which correct a local crash if XDMCP is enabled. GDM is the GNOME Display Manager for X. Two bugs have been found in the X Display Manager Control Protocol XDMCP which could allow a denial of service attack DoS by crashing the gdm daemon. The Common...

XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0

When the IPv6 code was added to xdm a critical test to disable xdmcp was accidentally removed. This caused xdm to create the chooser socket regardless if DisplayManager.requestPort was disabled in xdm-config or not...