CVE-2000-1059 in Mandrake Linuxinfo

Summary

The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Disclosure

12/11/2000

CPE

ready

CVSS

8.4

EPSS

0.00047

Activities

Very Low

Sources

Want to know what is going to be exploited?

We predict KEV entries!