CVE-2000-1059 — Mandrake Linux vulnerability

3 documents3 sources
Severity
7.2HIGHNVD
EPSS
0.0%
top 85.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mandrakesoft Mandrake Linux
Timeline
PublishedDec 11
Latest updateApr 30

Description

The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-95v2-65jv-mh6r: The default configuration of the Xsession file in Mandrake Linux 7↗2022-04-30
▶
CVEList
CVE-2000-1059: The default configuration of the Xsession file in Mandrake Linux 7↗2001-01-22
▶
CVE-2000-1059 — Mandrake Linux vulnerability | cvebase