github - ghsa-xcpv-777v-f4v3

ghsa-xcpv-777v-f4v3

Vulnerability from github

Published

2022-04-29 02:57

Modified

2022-04-29 02:57

Details

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2004-0419"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2004-08-18T04:00:00Z",
    "severity": "HIGH"
  },
  "details": "XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.",
  "id": "GHSA-xcpv-777v-f4v3",
  "modified": "2022-04-29T02:57:42Z",
  "published": "2022-04-29T02:57:42Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0419"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16264"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161"
    },
    {
      "type": "WEB",
      "url": "http://bugs.xfree86.org/show_bug.cgi?id=1376"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/12019"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1010306"
    },
    {
      "type": "WEB",
      "url": "http://www.ciac.org/ciac/bulletins/p-001.shtml"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073"
    },
    {
      "type": "WEB",
      "url": "http://www.openbsd.org/errata.html#xdm"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2004-478.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/10423"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

cve-2004-0419

Vulnerability from cvelistv5

Published

2004-06-03 04:00

Modified

2024-08-08 00:17

Severity ?

Summary

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.

References

▼	URL	Tags
	http://secunia.com/advisories/12019	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/16264	vdb-entry, x_refsource_XF
	http://bugs.xfree86.org/show_bug.cgi?id=1376	x_refsource_CONFIRM
	http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073	vendor-advisory, x_refsource_MANDRAKE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161	vdb-entry, signature, x_refsource_OVAL
	http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml	vendor-advisory, x_refsource_GENTOO
	http://www.ciac.org/ciac/bulletins/p-001.shtml	third-party-advisory, government-resource, x_refsource_CIAC
	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/10423	vdb-entry, x_refsource_BID
	http://securitytracker.com/id?1010306	vdb-entry, x_refsource_SECTRACK
	http://www.openbsd.org/errata.html#xdm	vendor-advisory, x_refsource_OPENBSD
	http://www.redhat.com/support/errata/RHSA-2004-478.html	vendor-advisory, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T00:17:14.693Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "12019",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/12019"
          },
          {
            "name": "xdm-socket-gain-access(16264)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16264"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.xfree86.org/show_bug.cgi?id=1376"
          },
          {
            "name": "MDKSA-2004:073",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073"
          },
          {
            "name": "oval:org.mitre.oval:def:10161",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161"
          },
          {
            "name": "GLSA-200407-05",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml"
          },
          {
            "name": "P-001",
            "tags": [
              "third-party-advisory",
              "government-resource",
              "x_refsource_CIAC",
              "x_transferred"
            ],
            "url": "http://www.ciac.org/ciac/bulletins/p-001.shtml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900"
          },
          {
            "name": "10423",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/10423"
          },
          {
            "name": "1010306",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1010306"
          },
          {
            "name": "20040526 008: SECURITY FIX: May 26, 2004",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENBSD",
              "x_transferred"
            ],
            "url": "http://www.openbsd.org/errata.html#xdm"
          },
          {
            "name": "RHSA-2004:478",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2004-478.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-05-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "12019",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/12019"
        },
        {
          "name": "xdm-socket-gain-access(16264)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16264"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.xfree86.org/show_bug.cgi?id=1376"
        },
        {
          "name": "MDKSA-2004:073",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073"
        },
        {
          "name": "oval:org.mitre.oval:def:10161",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161"
        },
        {
          "name": "GLSA-200407-05",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml"
        },
        {
          "name": "P-001",
          "tags": [
            "third-party-advisory",
            "government-resource",
            "x_refsource_CIAC"
          ],
          "url": "http://www.ciac.org/ciac/bulletins/p-001.shtml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900"
        },
        {
          "name": "10423",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/10423"
        },
        {
          "name": "1010306",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1010306"
        },
        {
          "name": "20040526 008: SECURITY FIX: May 26, 2004",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENBSD"
          ],
          "url": "http://www.openbsd.org/errata.html#xdm"
        },
        {
          "name": "RHSA-2004:478",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2004-478.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-0419",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "12019",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/12019"
            },
            {
              "name": "xdm-socket-gain-access(16264)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16264"
            },
            {
              "name": "http://bugs.xfree86.org/show_bug.cgi?id=1376",
              "refsource": "CONFIRM",
              "url": "http://bugs.xfree86.org/show_bug.cgi?id=1376"
            },
            {
              "name": "MDKSA-2004:073",
              "refsource": "MANDRAKE",
              "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073"
            },
            {
              "name": "oval:org.mitre.oval:def:10161",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161"
            },
            {
              "name": "GLSA-200407-05",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml"
            },
            {
              "name": "P-001",
              "refsource": "CIAC",
              "url": "http://www.ciac.org/ciac/bulletins/p-001.shtml"
            },
            {
              "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900"
            },
            {
              "name": "10423",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/10423"
            },
            {
              "name": "1010306",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1010306"
            },
            {
              "name": "20040526 008: SECURITY FIX: May 26, 2004",
              "refsource": "OPENBSD",
              "url": "http://www.openbsd.org/errata.html#xdm"
            },
            {
              "name": "RHSA-2004:478",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2004-478.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-0419",
    "datePublished": "2004-06-03T04:00:00",
    "dateReserved": "2004-04-16T00:00:00",
    "dateUpdated": "2024-08-08T00:17:14.693Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted