CVE-2004-0419: High severity Xfree86 Project Xdm vulnerability
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0419?
CVE-2004-0419 is considered a moderate severity vulnerability due to the unauthorized remote access it allows.
How do I fix CVE-2004-0419?
To fix CVE-2004-0419, ensure that DisplayManager.requestPort is correctly set to 0 or apply vendor patches that resolve this issue.
What is the impact of CVE-2004-0419?
The impact of CVE-2004-0419 includes potential unauthorized remote connections to the XDM service, leading to possible exploitation.
Which software versions are affected by CVE-2004-0419?
CVE-2004-0419 affects XFree86 version 6.7.0, XDM from the CVS repository, and Gentoo Linux version 1.4.
Who can exploit CVE-2004-0419?
CVE-2004-0419 can be exploited by remote attackers who can connect to the open chooserFd TCP socket.