Description
gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length.
References
- RHSA-2001:011 vendor-advisory
- RHSA-2001:010 vendor-advisory
- MDKSA-2001:019 vendor-advisory
- gnuserv-tcp-cookie-overflow(6056) vdb-entry
- 20010202 Remote vulnerability in gnuserv/XEmacs mailing-list