CVE-2004-0419

Current Description

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.

Basic Data

Published	August 18, 2004
Last Modified	October 11, 2017
Assigner	cve@mitre.org
Data Type	CVE
Data Format	MITRE
Data Version	4.0
Problem Type	NVD-CWE-Other
CVE Data Version	4.0

Base Metric V2

CVSS 2 - Version	2.0
CVSS 2 - Vector String	AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS 2 - Access Vector	NETWORK
CVSS 2 - Access Complexity	LOW
CVSS 2 - Authentication	NONE
CVSS 2 - Confidentiality Impact	PARTIAL
CVSS 2 - Availability Impact	PARTIAL
CVSS 2 - Base Score	7.5
Severity	HIGH
Exploitability Score	10.0
Impact Score	6.4
Obtain All Privilege	false
Obtain User Privilege	false
Obtain Other Privilege	true

Base Metric V3

No data provided.

Configurations

OR - Configuration 1

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other	Version Start Including	Version End Including	Version Start Excluding	Version End Excluding
2.3	Application	X.org	X11r6	6.7.0	*	*	*	*	*	*	*
2.3	Application	Xfree86 Project	Xdm	cvs	*	*	*	*	*	*	*

OR - Configuration 2

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other	Version Start Including	Version End Including	Version Start Excluding	Version End Excluding
2.3	OS	Gentoo	Linux	1.4	*	*	*	*	*	*	*

Vulnerable Software List

Vendor	Product	Versions
X.org	X11r6	6.7.0
Xfree86 Project	Xdm	cvs
Gentoo	Linux	1.4

References

Name	Source	URL	Tags
http://bugs.xfree86.org/show_bug.cgi?id=1376	http://bugs.xfree86.org/show_bug.cgi?id=1376	CONFIRM
12019	http://secunia.com/advisories/12019	SECUNIA
1010306	http://securitytracker.com/id?1010306	SECTRACK
P-001	http://www.ciac.org/ciac/bulletins/p-001.shtml	CIAC
GLSA-200407-05	http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml	GENTOO	Vendor Advisory
MDKSA-2004:073	http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073	MANDRAKE	PATCH Vendor Advisory
20040526 008: SECURITY FIX: May 26, 2004	http://www.openbsd.org/errata.html#xdm	OPENBSD
RHSA-2004:478	http://www.redhat.com/support/errata/RHSA-2004-478.html	REDHAT
10423	http://www.securityfocus.com/bid/10423	BID	PATCH Vendor Advisory
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900	CONFIRM
xdm-socket-gain-access(16264)	https://exchange.xforce.ibmcloud.com/vulnerabilities/16264	XF
oval:org.mitre.oval:def:10161	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161	OVAL