PT-2018-7145 · X.Org+5 · Libxdmcp+5
Eric Sesterhenn
·
Publicado
2017-07-14
·
Atualizado
2024-06-15
·
CVE-2017-2625
CVSS v3.1
6.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
libXdmcp versions prior to 1.1.2
Description:
A weakness in entropy used for generating session keys was found. On a multi-user system using xdmcp, a local attacker could potentially use information from the process list to brute force the key, allowing them to hijack other users' sessions.
Recommendations:
For versions prior to 1.1.2, update to version 1.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Red Hat
Suse
Ubuntu
Libxdmcp