CVE - CVE-2004-0419

CVE-ID
CVE-2004-0419	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:http://bugs.xfree86.org/show_bug.cgi?id=1376 CONFIRM:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900 GENTOO:GLSA-200407-05 URL:http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml MANDRAKE:MDKSA-2004:073 URL:http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073 OPENBSD:20040526 008: SECURITY FIX: May 26, 2004 URL:http://www.openbsd.org/errata.html#xdm REDHAT:RHSA-2004:478 URL:http://www.redhat.com/support/errata/RHSA-2004-478.html CIAC:P-001 URL:http://www.ciac.org/ciac/bulletins/p-001.shtml BID:10423 URL:http://www.securityfocus.com/bid/10423 OVAL:oval:org.mitre.oval:def:10161 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161 SECTRACK:1010306 URL:http://securitytracker.com/id?1010306 SECUNIA:12019 URL:http://secunia.com/advisories/12019 XF:xdm-socket-gain-access(16264) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/16264
Assigning CNA
N/A
Date Entry Created
20040416	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20040416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org