CVE

Id
2069  
CVE No.
CVE-2000-0491  
Status
Candidate  
Description
Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request.  
Phase
Proposed (20000712)  
Votes
MODIFY(2) Frech, Levy | NOOP(2) LeBlanc, Wall | REVIEWING(2) Christey, Ozancin  
Comments
Levy> The BID 1233 vulns is different from the other ones. BID 1233 uses | a FORWARD_QUERY request to overflow an in_addr structure via a memmove | in daemon/xdmcp.c, gdm_xdmcp_handle_forward_query(). In BID 1370 | a buffer is overflowed by a sprintf in xdmcp.c, send_failed(). | Frech> XF:gnome-gdm-bo(4530) | Christey> MANDRAKE:MDKSA-2001:070 | URL:http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-070.php3 | Christey> BUGTRAQ:20000527 gdm exploit | URL:http://marc.theaimsgroup.com/?l=bugtraq&m=96017189021021&w=2 | | Consider REDHAT:RHSA-2000:027 | Christey> RHSA-2000:027 confirmed via Mark Cox  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
6972 2069 CVE-2000-0491 BUGTRAQ:20000521 "gdm" remote hole  View
6973 2069 CVE-2000-0491 URL:http://archives.neohapsis.com/archives/bugtraq/2000-05/0241.html  View
6974 2069 CVE-2000-0491 SUSE:20000524 Security hole in gdm <= 2.0beta4-25  View
6975 2069 CVE-2000-0491 URL:http://www.novell.com/linux/security/advisories/suse_security_announce_49.html  View
6976 2069 CVE-2000-0491 BUGTRAQ:20000607 Conectiva Linux Security Announcement - gdm  View
6977 2069 CVE-2000-0491 URL:http://archives.neohapsis.com/archives/bugtraq/2000-06/0025.html  View
6978 2069 CVE-2000-0491 CALDERA:CSSA-2000-013.0  View
6979 2069 CVE-2000-0491 URL:ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-013.0.txt  View
6980 2069 CVE-2000-0491 BID:1233  View
6981 2069 CVE-2000-0491 URL:http://www.securityfocus.com/bid/1233  View
6982 2069 CVE-2000-0491 BID:1279  View
6983 2069 CVE-2000-0491 URL:http://www.securityfocus.com/bid/1279  View
6984 2069 CVE-2000-0491 BID:1370  View

Related JVN