CVE-2001-1086
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
04/07/2001
Last modified:
03/04/2025
Description
XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:xfree86_project:x11r6:3.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://online.securityfocus.com/archive/1/195008
- http://www.securityfocus.com/archive/1/194907
- http://www.securityfocus.com/bid/2985
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6808
- http://online.securityfocus.com/archive/1/195008
- http://www.securityfocus.com/archive/1/194907
- http://www.securityfocus.com/bid/2985
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6808