CVE-2000-1059: High severity Mandrakesoft Mandrake Linux vulnerability

Published Dec 11, 2000

Updated

The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges.

Affected Software

2 affected components

Mandrakesoft Mandrake Linux=7.0

Mandrakesoft Mandrake Linux=7.1

Remediation

Patch Available

http://www.securityfocus.com/bid/1735

Event History

Dec 11, 2000

CVE Published

05:00 AM

Jan 22, 2001

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-1059?

CVE-2000-1059 is considered a high severity vulnerability due to its ability to allow local users to gain unauthorized privileges.

How do I fix CVE-2000-1059?

To fix CVE-2000-1059, you should modify the Xsession file to remove the 'xhost + localhost' command to prevent bypassing the Xauthority access control.

Which versions of Mandrake Linux are affected by CVE-2000-1059?

CVE-2000-1059 affects Mandrake Linux versions 7.0 and 7.1.

What type of attack does CVE-2000-1059 facilitate?

CVE-2000-1059 facilitates local privilege escalation attacks by allowing users to sniff X Windows events.

Is CVE-2000-1059 specific to X Windows?

Yes, CVE-2000-1059 specifically impacts the X Windows environment in certain versions of Mandrake Linux.