Unscored severity · published Aug 18, 2004
CVE-2004-0419
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended…
–
CVSS
2.5%
EPSS
No
On KEV
Description
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Gentoo
1.4 · source: NVD
X1
X11r6 · X.org
6.7.0 · source: NVD
XD
Xdm · Xfree86 Project
cvs · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0419
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0419
bugs.xfree86.org
http://bugs.xfree86.org/show_bug.cgi?id=1376
secunia.com
http://secunia.com/advisories/12019
securitytracker.com
http://securitytracker.com/id?1010306
www.ciac.org
http://www.ciac.org/ciac/bulletins/p-001.shtml
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml
Patch
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073
More from Linux
9.8
CVE-2024-12084
Rsync: heap buffer overflow in rsync due to improper checksum length handling
7.5
CVE-2024-12087
Rsync: path traversal vulnerability in rsync
7.5
CVE-2024-12088
Rsync: --safe-links option bypass leads to path traversal
7.5
CVE-2024-12085
Rsync: info leak via uninitialized stack contents
6.8
CVE-2024-12086
A flaw was found in rsync