CVE-2001-1086

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://online.securityfocus.com/archive/1/195008Vendor Advisory
http://www.securityfocus.com/archive/1/194907Exploit, Vendor Advisory
http://www.securityfocus.com/bid/2985Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6808
http://online.securityfocus.com/archive/1/195008Vendor Advisory
http://www.securityfocus.com/archive/1/194907Exploit, Vendor Advisory
http://www.securityfocus.com/bid/2985Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6808

Timeline

Published: Jul 4, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-10877.5The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to CVE-2001-10887.5Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" opti CVE-2001-10897.5libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP requ CVE-2001-10907.5nss_postgresql 0.6.1 and before allows a remote attacker to execute arbitrary SQL queries by inserting SQL code into an HTTP request.CVE-2001-10917.2The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain CVE-2001-10922.1msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profil CVE-2001-10937.2Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument.CVE-2001-10944.6NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the student version, closing CVE-2001-10954.6Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter.CVE-2001-10964.6Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.CVE-2001-10975.0Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets.CVE-2001-10982.1Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain