Description
xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist.
References
- CLA-2002:533 vendor-advisory
- RHSA-2003:064 vendor-advisory
- RHSA-2003:065 vendor-advisory
- 55602 vendor-advisory
- http://wuarchive.wustl.edu/mirrors/NetBSD/NetBSD-current/xsrc/xfree/xc/programs/Xserver/hw/xfree86/CHANGELOG
- xfree86-xdm-unauth-access(11389) vdb-entry