XFree86 XDM RequestPort Random Open TCP Socket Vulnerability
BID:10423
Info
XFree86 XDM RequestPort Random Open TCP Socket Vulnerability
| Bugtraq ID: | 10423 |
| Class: | Design Error |
| CVE: |
CVE-2004-0419 |
| Remote: | Yes |
| Local: | No |
| Published: | May 27 2004 12:00AM |
| Updated: | Jul 12 2009 05:16AM |
| Credit: | Discovery of this vulnerability is credited to Steve Rumble <[email protected]>. |
| Vulnerable: |
XFree86 xdm CVS X.org X11R6 6.7 .0 Redhat Linux 9.0 i386 Redhat Linux 7.3 Redhat Fedora Core1 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux AS 3 Redhat Desktop 3.0 Gentoo Linux 1.4 Avaya Modular Messaging (MSS) 2.0 Avaya Modular Messaging (MSS) 1.1 Avaya MN100 Avaya Intuity LX |
| Not Vulnerable: | |
Discussion
XFree86 XDM RequestPort Random Open TCP Socket Vulnerability
xdm is reported prone to a potential security vulnerability that may lead to a false sense of security. A problem reported in xdm, is reported to result in a false sense of security because even though DisplayManager.requestPort is set to 0, xdm will open a chooserFd TCP socket on all interfaces.
xdm is reported prone to a potential security vulnerability that may lead to a false sense of security. A problem reported in xdm, is reported to result in a false sense of security because even though DisplayManager.requestPort is set to 0, xdm will open a chooserFd TCP socket on all interfaces.
Exploit / POC
XFree86 XDM RequestPort Random Open TCP Socket Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
XFree86 XDM RequestPort Random Open TCP Socket Vulnerability
Solution:
Red Hat has released advisory RHSA-2004:478-13 and fixes to address this and other issues on Red Hat Linux Enterprise platforms. Customers who are affected by this issue are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information.
OpenBSD has released a source code patch to address this issue in OpenBSD 3.5.
Gentoo Linux has released advisory GLSA 200407-05 addressing this issue. Please see the referenced advisory for further information. Users of affected packages are urged to execute the following commands as superuser:
If you are running the X.org version of X:
emerge sync
emerge -pv ">=x11-base/xorg-x11-6.7.0-r1"
emerge ">=x11-base/xorg-x11-6.7.0-r1"
If you are running the XFree86 version of X:
emerge sync
emerge -pv ">=x11-base/xfree-4.3.0-r6"
emerge ">=x11-base/xfree-4.3.0-r6"
Mandrake Linux has released an advisory (MDKSA-2004:073) to address this issue. Please see the referenced advisory for further information.
Avaya has released an advisory indicating vulnerable packages. Avaya has suggested that upgrades will be available to address this issue. Please see the advisory at the following location for more information:
http://support.avaya.com/japple/css/japple?temp.groupID=128450&temp.selectedFamily=128451&temp.selectedProduct=154235&temp.selectedBucket=126655&temp.feedbackState=askForFeedback&temp.documentID=203389&PAGE=avaya.css.CSSLvl1Detail&executeTransaction=avaya.css.UsageUpdate()
Fedora Legacy has released advisory FLSA-2005:2314 dealing with this and other issues for the Fedora Core 1 and RedHat Linux packages. Please see the referenced advisory for more information.
Solution:
Red Hat has released advisory RHSA-2004:478-13 and fixes to address this and other issues on Red Hat Linux Enterprise platforms. Customers who are affected by this issue are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information.
OpenBSD has released a source code patch to address this issue in OpenBSD 3.5.
Gentoo Linux has released advisory GLSA 200407-05 addressing this issue. Please see the referenced advisory for further information. Users of affected packages are urged to execute the following commands as superuser:
If you are running the X.org version of X:
emerge sync
emerge -pv ">=x11-base/xorg-x11-6.7.0-r1"
emerge ">=x11-base/xorg-x11-6.7.0-r1"
If you are running the XFree86 version of X:
emerge sync
emerge -pv ">=x11-base/xfree-4.3.0-r6"
emerge ">=x11-base/xfree-4.3.0-r6"
Mandrake Linux has released an advisory (MDKSA-2004:073) to address this issue. Please see the referenced advisory for further information.
Avaya has released an advisory indicating vulnerable packages. Avaya has suggested that upgrades will be available to address this issue. Please see the advisory at the following location for more information:
http://support.avaya.com/japple/css/japple?temp.groupID=128450&temp.selectedFamily=128451&temp.selectedProduct=154235&temp.selectedBucket=126655&temp.feedbackState=askForFeedback&temp.documentID=203389&PAGE=avaya.css.CSSLvl1Detail&executeTransaction=avaya.css.UsageUpdate()
Fedora Legacy has released advisory FLSA-2005:2314 dealing with this and other issues for the Fedora Core 1 and RedHat Linux packages. Please see the referenced advisory for more information.
References
XFree86 XDM RequestPort Random Open TCP Socket Vulnerability
References:
References:
- OpenBSD Errata Page (OpenBSD)
- RHSA-2004:478-13 - Updated XFree86 packages fix security issues and bugs (RedHat)
- xdm opens random tcp sockets (XFree86 Bugzilla)