CVE-2001-1086 XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X displ...
HighCVSS 7.5
EPSS 2.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xfree86 project x11r6 | = 3.3 | No fix listed |
| xfree86 project x11r6 | = 3.3.3 | No fix listed |
References
- 20010705 Re: xdm cookies fast brute force mailing-list vendor-advisory
- 20010704 xdm cookies fast brute force exploit mailing-list vendor-advisory
- 2985 exploit patch vdb-entry vendor-advisory
- xdm-cookie-brute-force(6808) vdb-entry