CVE-2000-1059

The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost"…

published January 22, 2001

CVSS
—
EPSS
0%
Percentile
33.6
In the wild
Unconfirmed
What it is

The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00407 · 33.6th percentile
Published
2001-01-22T05:00Z
EPSS history
Timeline
  • 22 JAN 05:00Z
    The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost"…
    cvelistv5