CVE

Id
8847  
CVE No.
CVE-2004-0419  
Status
Candidate  
Description
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.  
Phase
Assigned (20040416)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
56240 8847 CVE-2004-0419 CONFIRM:http://bugs.xfree86.org/show_bug.cgi?id=1376  View
56241 8847 CVE-2004-0419 CONFIRM:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900  View
56242 8847 CVE-2004-0419 GENTOO:GLSA-200407-05  View
56243 8847 CVE-2004-0419 URL:http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml  View
56244 8847 CVE-2004-0419 MANDRAKE:MDKSA-2004:073  View
56245 8847 CVE-2004-0419 URL:http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073  View
56246 8847 CVE-2004-0419 OPENBSD:20040526 008: SECURITY FIX: May 26, 2004  View
56247 8847 CVE-2004-0419 URL:http://www.openbsd.org/errata.html#xdm  View
56248 8847 CVE-2004-0419 REDHAT:RHSA-2004:478  View
56249 8847 CVE-2004-0419 URL:http://www.redhat.com/support/errata/RHSA-2004-478.html  View
56250 8847 CVE-2004-0419 CIAC:P-001  View
56251 8847 CVE-2004-0419 URL:http://www.ciac.org/ciac/bulletins/p-001.shtml  View
56252 8847 CVE-2004-0419 BID:10423  View
56253 8847 CVE-2004-0419 URL:http://www.securityfocus.com/bid/10423  View
56254 8847 CVE-2004-0419 OVAL:oval:org.mitre.oval:def:10161  View
56255 8847 CVE-2004-0419 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10161  View
56256 8847 CVE-2004-0419 SECTRACK:1010306  View
56257 8847 CVE-2004-0419 URL:http://securitytracker.com/id?1010306  View
56258 8847 CVE-2004-0419 SECUNIA:12019  View
56259 8847 CVE-2004-0419 URL:http://secunia.com/advisories/12019  View
56260 8847 CVE-2004-0419 XF:xdm-socket-gain-access(16264)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62939 JVNDB-2004-000281 Microsoft Windows Shell における CLSID を拡張子に含むファイルを介して任意のコマンドを実行される脆弱性 Microsoft Windows シェルには、特定のクラス ID (CLSID) をファイルの拡張子に含むファイルの取り扱いに不備があるため、ファイルの拡張子を偽装可能な脆弱性が存在します。 CVE-2004-0420 8847 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000281.html  View