CVE-2002-1160

The default configuration of the pam_xauth module forwards MIT-Magic-Cookies to new X sessions, which could allow local users to gain root privileges by…

published September 1, 2004

CVSS
—
EPSS
0%
Percentile
36.1
In the wild
Unconfirmed
What it is

The default configuration of the pam_xauth module forwards MIT-Magic-Cookies to new X sessions, which could allow local users to gain root privileges by stealing the cookies from a temporary .xauth file, which is created with the original user's credentials after root uses su.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00431 · 36.1th percentile
Published
2004-09-01T04:00Z
EPSS history
Timeline
  • 01 SEP 04:00Z
    The default configuration of the pam_xauth module forwards MIT-Magic-Cookies to new X sessions, which could allow local users to gain root privileges by…
    cvelistv5