CVE-2000-1060 in XFceinfo

Zusammenfassung

von MITRE

The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Veröffentlichung

11.12.2000

Moderieren

akzeptiert

Eintrag

VDB-16080

CPE

bereit

EPSS

0.00337

KEV

nein

Aktivitäten

very low

Quellen

Interested in the pricing of exploits?

See the underground prices here!