CVE-2010-2945

CVE-2010-2945 affects the Slim program; the issue arises when the default_path in slim.conf places ./ at the start, enabling local privilege escalation via a Trojan horse in the current working directory. Connected advisories (Fedora GLSA updates and OpenVAS feeds) confirm Slim as affected and re...

CVE-2009-1756

CVE-2009-1756 affects SLiM Simple Login Manager 1.3.0. The X authority mcookie is placed on the command line when invoking xauth from app.cpp and switchuser.cpp, enabling a local attacker to view the process and its arguments and potentially access the X session. The issue is described in the ini...