CVE-2009-1756

SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp…

published May 22, 2009

CVSS
—
EPSS
0%
Percentile
39.2
In the wild
Unconfirmed
What it is

SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00464 · 39.2th percentile
Published
2009-05-22T01:00Z
EPSS history
Timeline
  • 22 MAY 01:00Z
    SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp…
    cvelistv5