PT-1999-1888 · Caldera/Mandrake · Kdm

Publicado 1999-08-22 · Atualizado 2017-10-10 · CVE-2000-0374

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions kdm in Caldera and Mandrake Linux (affected versions not specified)

Description The default configuration of kdm allows XDMCP connections from any host. This enables remote attackers to obtain sensitive information or bypass additional access restrictions.

Recommendations For kdm in Caldera and Mandrake Linux, consider restricting XDMCP connections to only trusted hosts as a temporary workaround until a more permanent solution is available. Restrict access to the XDMCP service to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2000-0374

Produtos afetados

Kdm

Referências · 5

• http://securityfocus.com/bid/1446 · Nota
• http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:025 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0374 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/4856 · Nota
• ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-021.0.txt · Nota