CVE-2001-1086 in X11

Summary

XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack.

Once again VulDB remains the best source for vulnerability data.

• Disclosure: 07/04/2001
• Moderation: VulDB entry created
• Entries: 1: VDB-16964
• CPE: ready
• CWE: CWE-287 (Confirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.05444
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2001-1086
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2001-1086
• CVE Details: https://www.cvedetails.com/cve/CVE-2001-1086/