Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
XDM Session Cookie可预测漏洞
Vulnerability Description
CVE(CAN) ID: CAN-2001-1086 xdm是X显示管理工具，是XFree86软件包的一部分，主要负责本地和远程的X Session的 显示的管理。 如果xdm服务器编译时没有包含WrapHelp.c的话，就容易受到X cookie的穷举攻击，这 是由于使用了容易猜测的数字保护Session的结果。 这可能导致远程攻击者获得对显示器的访问。
CVSS Information
N/A
Vulnerability Type
N/A