Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

x.org xdm vulnerabilities and exploits

(subscribe to this query)
668
VMScore
CVE-2004-0419
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote malicious users to connect to the port, in violation of the intended restrictions.
X.org X11r6 6.7.0Xfree86 Project Xdm CvsGentoo Linux 1.4
641
VMScore
CVE-2006-4447
X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceed...
X.org X11r6 6.8.1X.org X11r6 6.8.2X.org Xload 1.0.0X.org Xorg-server 1.02 R5X.org Emu-linux-x87-xlibs 7.0 R1X.org X11r6 6.7.0X.org X11r6 6.8X.org Xf86dga 1.0.0X.org Xinit 1.0.2 R5X.org X11r7 1.0X.org X11r7 1.0.1X.org Xterm 214X.org X11r7 1.0.2X.org Xdm 1.0.3
231
VMScore
CVE-2006-5215
The Xsession script, as used by X Display Manager (xdm) in NetBSD prior to 20060212, X.Org prior to 20060317, and Solaris 8 through 10 prior to 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /...
X.org XdmNetbsd Netbsd 1.1Netbsd Netbsd 1.2Netbsd Netbsd 1.4.1Netbsd Netbsd 1.4.2Netbsd Netbsd 1.5.1Netbsd Netbsd 1.5.2Netbsd Netbsd 2.0Netbsd Netbsd 2.0.1Sun Solaris 10.0Sun Sunos 5.8Sun Solaris 9.0Netbsd Netbsd 1.3.1Netbsd Netbsd 1.3.2Netbsd Netbsd 1.2.1Netbsd Netbsd 1.3Netbsd Netbsd 1.4.3Netbsd Netbsd 1.4Netbsd Netbsd 1.5.3Netbsd Netbsd 1.5Netbsd Netbsd 2.0.2Netbsd Netbsd 2.0.3
107
VMScore
CVE-2006-5214
Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD prior to 20060212, X.Org prior to 20060225, and Solaris 8 through 10 prior to 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows...
Netbsd Netbsd 3.99.15Sun Solaris 10.0Sun Sunos 5.8Sun Solaris 9.0Netbsd Netbsd 3.0
383
VMScore
CVE-2013-2179
X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) by attempting to log...
X X Display Manager 1.1.11X X Display Manager 1.1.10
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook