CVE-2004-0419 in OpenBSD

Summary

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 04/16/2004
• Disclosure: 08/18/2004
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-287 (Confirmed)
• CVSS: 6.5
• EPSS: 0.02796
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-0419
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-0419
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-0419/