CVE-2002-1160: High severity redhat linux vulnerability
The default configuration of the pamxauth module forwards MIT-Magic-Cookies to new X sessions, which could allow local users to gain root privileges by stealing the cookies from a temporary .xauth file, which is created with the original user's credentials after root uses su.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1160?
CVE-2002-1160 has a high severity rating as it can lead to local privilege escalation, allowing users to gain root access.
How do I fix CVE-2002-1160?
To fix CVE-2002-1160, change the configuration of the pam_xauth module to prevent the forwarding of MIT-Magic-Cookies.
What systems are affected by CVE-2002-1160?
CVE-2002-1160 affects multiple versions of Red Hat Linux, including 7.1, 7.2, 7.3, and 8.0.
Can CVE-2002-1160 be exploited remotely?
CVE-2002-1160 cannot be exploited remotely as it requires local access to the system.
What is the impact of exploiting CVE-2002-1160?
The impact of exploiting CVE-2002-1160 includes the potential for local users to gain unauthorized root privileges on the system.