CVE-2004-0390: High severity SCO OpenServer vulnerability
Published Dec 31, 2004
·Updated
SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods.
Affected Software
3 affected components
SCO OpenServer=5.0.7
SCO OpenServer=5.0.5
SCO OpenServer=5.0.6
Event History
Dec 31, 2004
CVE Published
05:00 AM
Apr 14, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0390?
CVE-2004-0390 is considered a high severity vulnerability due to the potential for unauthorized access to X sessions.
2
How do I fix CVE-2004-0390?
To fix CVE-2004-0390, ensure that Xauthority style access control is properly configured and restrict other X login methods.
3
What versions of SCO OpenServer are affected by CVE-2004-0390?
CVE-2004-0390 affects SCO OpenServer versions 5.0.5, 5.0.6, and 5.0.7.
4
What type of attacks does CVE-2004-0390 allow?
CVE-2004-0390 allows remote attackers to gain unauthorized access to an X session.
5
Is CVE-2004-0390 a local or remote vulnerability?
CVE-2004-0390 is a remote vulnerability, allowing attackers to exploit it from outside the target system.