CVE-2002-1510 xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist.
HighCVSS 10.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xfree86 project x11r6 | All versions | No fix listed |
References
- CLA-2002:533 vendor-advisory
- 55602 vendor-advisory
- wuarchive.wustl.edu vendor-advisory
- xfree86-xdm-unauth-access(11389) vdb-entry vendor-advisory
- RHSA-2003:064 vendor-advisory
- RHSA-2003:065 vendor-advisory