Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

bugtraq logo Bugtraq mailing list archives

Local vulnerability in XFCE 3.5.1
From: Nicholas Brawn <nickbrawn () ONETEL COM>
Date: Tue, 3 Oct 2000 11:14:13 +1100
Problem:

XFCE 3.5.1 ships with the following entry in /etc/X11/xfce/xinitrc:

xhost +$HOSTNAME

If a person is using this on a multiuser system, all local users may connect to their X session and capture keystrokes, 
etc.

Fix:

Upgrade to XFCE 3.5.2. The offending line has been commented out.

Cheers,
Nick

  By Date           By Thread  

Current thread:
  • Local vulnerability in XFCE 3.5.1 Nicholas Brawn (Oct 02)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]