xdm, with the authComplain variable set to false, allows arbitrary malicious users to connect to the X server if the xdm auth directory does not exist.
xfree86 project x11r6