7.5

CVE-2004-0419

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
X.Org ≫ X11r6 Version6.7.0
Xfree86 Project ≫ Xdm Versioncvs
Gentoo ≫ Linux Version1.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.48% 0.825
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://bugs.xfree86.org/show_bug.cgi?id=1376
http://secunia.com/advisories/12019
http://securitytracker.com/id?1010306
http://www.ciac.org/ciac/bulletins/p-001.shtml
http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml
Vendor Advisory
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073
Patch
Vendor Advisory
http://www.openbsd.org/errata.html#xdm
http://www.redhat.com/support/errata/RHSA-2004-478.html
http://www.securityfocus.com/bid/10423
Patch
Vendor Advisory
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900
https://exchange.xforce.ibmcloud.com/vulnerabilities/16264
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161