CVE
- Id
- 3890
- CVE No.
- CVE-2001-1086
- Status
- Candidate
- Description
- XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack.
- Phase
- Proposed (20020315)
- Votes
- ACCEPT(6) Armstrong, Baker, Cole, Frech, Green, Ziese | NOOP(2) Foat, Wall
- Comments