Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2000-0453 — Project X11r6 vulnerability

4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
5.8%
top 9.52%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Xfree86 Project X11r6
Timeline
PublishedMay 18
Latest updateMay 3

Description

XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDxfree86_project/x11r63.3.5, 3.3.6, 4.0+2

🔴Vulnerability Details

2
GHSA
GHSA-3vr3-fvrq-86x3: XFree86 3↗2022-05-03
▶
CVEList
CVE-2000-0453: XFree86 3↗2000-07-12
▶

💥Exploits & PoCs

1
Exploit-DB
XFree86 X11R6 3.3.5/3.3.6/4.0 Xserver - Denial of Service↗2000-05-18
▶
CVE-2000-0453 — Xfree86 Project X11r6 vulnerability | cvebase