Page 3 of 28 results (0.004 seconds)

CVSS: 9.8EPSS: 3%CPEs: 2EXPL: 3

04 Jul 2001 — XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack. • https://www.exploit-db.com/exploits/20993 •

CVSS: 7.5EPSS: 1%CPEs: 13EXPL: 2

19 Jun 2000 — libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro. • https://www.exploit-db.com/exploits/20023 •

CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 1

19 Jun 2000 — libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop. • http://marc.info/?l=bugtraq&m=96146116627474&w=2 •

CVSS: 7.5EPSS: 7%CPEs: 5EXPL: 2

01 Jun 2000 — xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized. • https://www.exploit-db.com/exploits/19984 •

CVSS: 7.5EPSS: 4%CPEs: 3EXPL: 1

18 May 2000 — XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000. • https://www.exploit-db.com/exploits/19950 •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1

16 Apr 2000 — Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter. • http://archives.neohapsis.com/archives/bugtraq/2000-04/0076.html •

CVSS: 7.8EPSS: 0%CPEs: 14EXPL: 1

21 Mar 1999 — XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service. • https://www.exploit-db.com/exploits/19257 •

CVSS: 10.0EPSS: 5%CPEs: 6EXPL: 0

01 Nov 1995 — Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0241 •