CVE-2004-0419

Advisory lineage Upstream: 0 Downstream: 1
Downstream
RHSA-2004:478
Modified
Published: 03 Jun 2004, 04:00
Last modified:08 Aug 2024, 00:17

Vulnerability Summary

Overall Risk (default)
medium
30/100
CVSS Score
7.5 HIGH
v2.0 (nvd)
EPSS Score
2.48% LOW
2% probability -0.32%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

03 Jun 2004, 04:00
Published
Vulnerability first disclosed
08 Aug 2024, 00:17
Last Modified
Vulnerability information updated

Description

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.

CVSS Metrics

  • v2.0•HIGH•Score: 7.5AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 2.48%• Percentile: 83%

Affected Systems

  • gentoo•linux

    1.4

  • xfree86_project•xdm

    cvs

  • x.org•x11r6

    6.7.0

References (12)