RedHat X Authentication Vulnerability
BID:310
Info
RedHat X Authentication Vulnerability
| Bugtraq ID: | 310 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jun 17 1999 12:00AM |
| Updated: | Jun 17 1999 12:00AM |
| Credit: | |
| Vulnerable: |
Redhat Linux 6.0 |
| Not Vulnerable: | |
Discussion
RedHat X Authentication Vulnerability
A missing directory causes the X server to fall back to no authentication when started from a display manager.
In a default installation of RedHat 6.0 the directory /usr/X11R6/lib/X11/xdm/authdir/authfiles is missing. This directory is used by the display manager to store X authentication information. If the X server is started via the display manager (e.g. xdm, kdm) the server will be started with no authentication at all, thus allowing any remote and local malicious users to connect to it.
This is RedHat Bug ID 2423.
A missing directory causes the X server to fall back to no authentication when started from a display manager.
In a default installation of RedHat 6.0 the directory /usr/X11R6/lib/X11/xdm/authdir/authfiles is missing. This directory is used by the display manager to store X authentication information. If the X server is started via the display manager (e.g. xdm, kdm) the server will be started with no authentication at all, thus allowing any remote and local malicious users to connect to it.
This is RedHat Bug ID 2423.
Exploit / POC
RedHat X Authentication Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
RedHat X Authentication Vulnerability
Solution:
Upgrade to the following RPMs made available by RedHat:
Intel: ftp://updates.redhat.com/6.0/i386/XFree86-3.3.3.1-52.i386.rpm
Alpha: ftp://updates.redhat.com/6.0/alpha/XFree86-100dpi-fonts-3.3.3.1-52.alpha.rpm
Sparc: ftp://updates.redhat.com/6.0/sparc/XFree86-100dpi-fonts-3.3.3.1-52.sparc.rpm
Solution:
Upgrade to the following RPMs made available by RedHat:
Intel: ftp://updates.redhat.com/6.0/i386/XFree86-3.3.3.1-52.i386.rpm
Alpha: ftp://updates.redhat.com/6.0/alpha/XFree86-100dpi-fonts-3.3.3.1-52.alpha.rpm
Sparc: ftp://updates.redhat.com/6.0/sparc/XFree86-100dpi-fonts-3.3.3.1-52.sparc.rpm