Vulnerability in Mandrakesoft Mandrake Linux

CVE-2000-1059

The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges.

EPSS: 0.004 (33.4th percentile) — read the EPSS interpretation.

Affected products

Mandrakesoft Mandrake_linux — versions 7.0, 7.1
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)