CVE-2004-0419 Misconfiguration in n/a
XDM opens a TCP socket despite configuration restrictions, allowing remote attackers to connect to the port and bypass intended access controls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-0419?
CVE-2004-0419 is a high-severity vulnerability in Gentoo Linux, published on 3 Jun 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
Which versions are affected by CVE-2004-0419?
It affects 3 products.
Products include Gentoo Linux, X.org X11r6, Xfree86 Project Xdm.
How do I fix CVE-2004-0419?
Apply the vendor's patch.
Is CVE-2004-0419 being exploited?
There is no known exploitation of CVE-2004-0419 in the wild and no public exploit code.
Other vulnerabilities in Gentoo Linux
Sources
Also known as GHSA-xcpv-777v-f4v3.