Bugtraq mailing list archives
xdm problems
From: roessler () SOBOLEV RHEIN DE (Thomas Roessler)
Date: Fri, 17 Apr 1998 00:14:20 +0200
The following behaviour is reproducible; the port number
in question seems to be rather random. The system is an
(almost) out-of-the-box Debian GNU/Linux "hamm" machine,
xdm seems to come from XFree86 3.3.2.
tlr
------------------------------
Script started on Fri Apr 17 00:04:25 1998
[root@sobolev /root]# /usr/X11R6/bin/xdm -nodaemon &
[1] 8668
[root@sobolev /root]# netstat -at
Active Internet connections (including servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 *:2639 *:* LISTEN
[...]
tcp 0 0 *:6000 *:* LISTEN
[root@sobolev /root]# fuser -v 2639/tcp
USER PID ACCESS COMMAND
2639/tcp root 8668 f.... xdm
root 8670 f.... XF86_S3
root 8671 f.... xdm
root 8678 f.... xconsole
[root@sobolev /root]# echo bla | socket localhost 2639
[1]+ Segmentation fault /usr/X11R6/bin/xdm -nodaemon
[root@sobolev /root]# exit
Script done on Fri Apr 17 00:05:02 1998
--
Thomas Roessler · 74a353cc0b19 · dg1ktr · http://home.pages.de/~roessler/
2048/CE6AC6C1 · 4E 04 F0 BC 72 FF 14 23 44 85 D1 A1 3B B0 73 C1
Current thread:
- Re: APC UPS PowerChute PLUS exploit..., (continued)
- Re: APC UPS PowerChute PLUS exploit... Scott Stone (Apr 14)
- New possible exploit for 2.0.33 (kfree_skb error) Paul (Apr 15)
- Re: New possible exploit for 2.0.33 (kfree_skb error) Alan Cox (Apr 15)
- Linux 2.0.33 vulnerability: fragment patterns Alan Cox (Apr 16)
- Linux 2.0.33 vulnerability: oversized packets Michal Zalewski (Apr 17)
- Linux 2.0.34pre10: Summary of fixed vulnerabilities Alan Cox (Apr 20)
- Re: Linux 2.0.33 vulnerability: oversized packets Jon Lewis (Apr 20)
- Re: Linux 2.0.33 vulnerability: oversized packets Krzysztof G. Baranowski (Apr 21)
- code to crash cistron's radius Hamdi Tounsi (Apr 21)
- nestea v2. The program that DoS's 2.0.33s The Tree of Life (Apr 18)
- xdm problems Thomas Roessler (Apr 16)
- Re: xdm problems Matthieu Herrb (Apr 20)
- SECURITY: procps 1.2.7 fixes security hole Aleph One (Apr 20)
