xvfb-run Insecure Magic Cookie Local Information Disclosure Vulnerability

Bugtraq ID:	34828
Class:	Design Error
CVE:	CVE-2009-1573
Remote:	No
Local:	Yes
Published:	May 05 2009 12:00AM
Updated:	Apr 16 2015 05:44PM
Credit:	Loïc Minier
Vulnerable:	xvfb-run xvfb-run 0 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:

xvfb-run Insecure Magic Cookie Local Information Disclosure Vulnerability

The 'xvfb-run' command is prone to an information-disclosure vulnerability.

Exploiting this issue may allow a local attacker to obtain sensitive information that may lead to further attacks.

xvfb-run Insecure Magic Cookie Local Information Disclosure Vulnerability

Attackers can use standard tools to exploit this issue.

xvfb-run Insecure Magic Cookie Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu xdmx-tools_1.6.4-2ubuntu4.3_sparc.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xdmx-tools_1.6.4-2 ubuntu4.3_sparc.deb


• Ubuntu xdmx_1.6.4-2ubuntu4.3_sparc.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xdmx_1.6.4-2ubuntu 4.3_sparc.deb


• Ubuntu xnest_1.6.4-2ubuntu4.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xnest_1.6.4-2ubuntu4.3 _sparc.deb


• Ubuntu xserver-common_1.6.4-2ubuntu4.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-comm on_1.6.4-2ubuntu4.3_all.deb


• Ubuntu xserver-xephyr_1.6.4-2ubuntu4.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xephyr_1.6.4-2 ubuntu4.3_sparc.deb


• Ubuntu xserver-xfbdev_1.6.4-2ubuntu4.3_sparc.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xserver-xfbdev_1.6 .4-2ubuntu4.3_sparc.deb


• Ubuntu xserver-xorg-core-dbg_1.6.4-2ubuntu4.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core-dbg_ 1.6.4-2ubuntu4.3_sparc.deb


• Ubuntu xserver-xorg-core_1.6.4-2ubuntu4.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core_1.6. 4-2ubuntu4.3_sparc.deb


• Ubuntu xserver-xorg-dev_1.6.4-2ubuntu4.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-dev_1.6.4 -2ubuntu4.3_sparc.deb


• Ubuntu xvfb_1.6.4-2ubuntu4.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xvfb_1.6.4-2ubuntu4.3_ sparc.deb

Ubuntu Ubuntu Linux 9.04 i386

• Ubuntu xdmx-tools_1.6.0-0ubuntu14.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xorg-server/xdmx-too ls_1.6.0-0ubuntu14.2_i386.deb


• Ubuntu xdmx_1.6.0-0ubuntu14.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xorg-server/xdmx_1.6 .0-0ubuntu14.2_i386.deb


• Ubuntu xnest_1.6.0-0ubuntu14.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xnest_1.6.0- 0ubuntu14.2_i386.deb


• Ubuntu xserver-common_1.6.0-0ubuntu14.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-comm on_1.6.0-0ubuntu14.2_all.deb


• Ubuntu xserver-xephyr_1.6.0-0ubuntu14.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xorg-server/xserver- xephyr_1.6.0-0ubuntu14.2_i386.deb


• Ubuntu xserver-xfbdev_1.6.0-0ubuntu14.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xorg-server/xserver- xfbdev_1.6.0-0ubuntu14.2_i386.deb


• Ubuntu xserver-xorg-core-dbg_1.6.0-0ubuntu14.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -core-dbg_1.6.0-0ubuntu14.2_i386.deb


• Ubuntu xserver-xorg-core_1.6.0-0ubuntu14.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -core_1.6.0-0ubuntu14.2_i386.deb


• Ubuntu xserver-xorg-dev_1.6.0-0ubuntu14.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -dev_1.6.0-0ubuntu14.2_i386.deb


• Ubuntu xvfb_1.6.0-0ubuntu14.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xvfb_1.6.0-0 ubuntu14.2_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu xnest_1.4.1~git20080131-1ubuntu9.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xnest_1.4.1~git2008013 1-1ubuntu9.3_powerpc.deb


• Ubuntu xserver-xephyr_1.4.1~git20080131-1ubuntu9.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xephyr_1.4.1~g it20080131-1ubuntu9.3_powerpc.deb


• Ubuntu xserver-xorg-core-dbg_1.4.1~git20080131-1ubuntu9.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core-dbg_ 1.4.1~git20080131-1ubuntu9.3_powerpc.deb


• Ubuntu xserver-xorg-core_1.4.1~git20080131-1ubuntu9.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core_1.4. 1~git20080131-1ubuntu9.3_powerpc.deb


• Ubuntu xserver-xorg-dev_1.4.1~git20080131-1ubuntu9.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-dev_1.4.1 ~git20080131-1ubuntu9.3_powerpc.deb


• Ubuntu xvfb_1.4.1~git20080131-1ubuntu9.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xvfb_1.4.1~git20080131 -1ubuntu9.3_powerpc.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu xdmx-tools_1.6.0-0ubuntu14.2_lpia.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xdmx-tools_1.6.0-0 ubuntu14.2_lpia.deb


• Ubuntu xdmx_1.6.0-0ubuntu14.2_lpia.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xdmx_1.6.0-0ubuntu 14.2_lpia.deb


• Ubuntu xnest_1.6.0-0ubuntu14.2_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xnest_1.6.0-0ubuntu14. 2_lpia.deb


• Ubuntu xserver-common_1.6.0-0ubuntu14.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-comm on_1.6.0-0ubuntu14.2_all.deb


• Ubuntu xserver-xephyr_1.6.0-0ubuntu14.2_lpia.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xserver-xephyr_1.6 .0-0ubuntu14.2_lpia.deb


• Ubuntu xserver-xfbdev_1.6.0-0ubuntu14.2_lpia.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xserver-xfbdev_1.6 .0-0ubuntu14.2_lpia.deb


• Ubuntu xserver-xorg-core-dbg_1.6.0-0ubuntu14.2_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core-dbg_ 1.6.0-0ubuntu14.2_lpia.deb


• Ubuntu xserver-xorg-core_1.6.0-0ubuntu14.2_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core_1.6. 0-0ubuntu14.2_lpia.deb


• Ubuntu xserver-xorg-dev_1.6.0-0ubuntu14.2_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-dev_1.6.0 -0ubuntu14.2_lpia.deb


• Ubuntu xvfb_1.6.0-0ubuntu14.2_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xvfb_1.6.0-0ubuntu14.2 _lpia.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu xdmx-tools_1.6.4-2ubuntu4.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xorg-server/xdmx-too ls_1.6.4-2ubuntu4.3_i386.deb


• Ubuntu xdmx_1.6.4-2ubuntu4.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xorg-server/xdmx_1.6 .4-2ubuntu4.3_i386.deb


• Ubuntu xnest_1.6.4-2ubuntu4.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xnest_1.6.4- 2ubuntu4.3_i386.deb


• Ubuntu xserver-common_1.6.4-2ubuntu4.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-comm on_1.6.4-2ubuntu4.3_all.deb


• Ubuntu xserver-xephyr_1.6.4-2ubuntu4.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xeph yr_1.6.4-2ubuntu4.3_i386.deb


• Ubuntu xserver-xfbdev_1.6.4-2ubuntu4.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xorg-server/xserver- xfbdev_1.6.4-2ubuntu4.3_i386.deb


• Ubuntu xserver-xorg-core-dbg_1.6.4-2ubuntu4.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -core-dbg_1.6.4-2ubuntu4.3_i386.deb


• Ubuntu xserver-xorg-core_1.6.4-2ubuntu4.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -core_1.6.4-2ubuntu4.3_i386.deb


• Ubuntu xserver-xorg-dev_1.6.4-2ubuntu4.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -dev_1.6.4-2ubuntu4.3_i386.deb


• Ubuntu xvfb_1.6.4-2ubuntu4.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xvfb_1.6.4-2 ubuntu4.3_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu xnest_1.4.1~git20080131-1ubuntu9.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xnest_1.4.1~git2008013 1-1ubuntu9.3_sparc.deb


• Ubuntu xserver-xephyr_1.4.1~git20080131-1ubuntu9.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xephyr_1.4.1~g it20080131-1ubuntu9.3_sparc.deb


• Ubuntu xserver-xorg-core-dbg_1.4.1~git20080131-1ubuntu9.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core-dbg_ 1.4.1~git20080131-1ubuntu9.3_sparc.deb


• Ubuntu xserver-xorg-core_1.4.1~git20080131-1ubuntu9.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core_1.4. 1~git20080131-1ubuntu9.3_sparc.deb


• Ubuntu xserver-xorg-dev_1.4.1~git20080131-1ubuntu9.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-dev_1.4.1 ~git20080131-1ubuntu9.3_sparc.deb


• Ubuntu xvfb_1.4.1~git20080131-1ubuntu9.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xvfb_1.4.1~git20080131 -1ubuntu9.3_sparc.deb

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu xdmx-tools_1.6.4-2ubuntu4.3_powerpc.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xdmx-tools_1.6.4-2 ubuntu4.3_powerpc.deb


• Ubuntu xdmx_1.6.4-2ubuntu4.3_powerpc.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xdmx_1.6.4-2ubuntu 4.3_powerpc.deb


• Ubuntu xnest_1.6.4-2ubuntu4.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xnest_1.6.4-2ubuntu4.3 _powerpc.deb


• Ubuntu xserver-common_1.6.4-2ubuntu4.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-comm on_1.6.4-2ubuntu4.3_all.deb


• Ubuntu xserver-xephyr_1.6.4-2ubuntu4.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xephyr_1.6.4-2 ubuntu4.3_powerpc.deb


• Ubuntu xserver-xfbdev_1.6.4-2ubuntu4.3_powerpc.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xserver-xfbdev_1.6 .4-2ubuntu4.3_powerpc.deb


• Ubuntu xserver-xorg-core-dbg_1.6.4-2ubuntu4.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core-dbg_ 1.6.4-2ubuntu4.3_powerpc.deb


• Ubuntu xserver-xorg-core_1.6.4-2ubuntu4.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core_1.6. 4-2ubuntu4.3_powerpc.deb


• Ubuntu xserver-xorg-dev_1.6.4-2ubuntu4.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-dev_1.6.4 -2ubuntu4.3_powerpc.deb


• Ubuntu xvfb_1.6.4-2ubuntu4.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xvfb_1.6.4-2ubuntu4.3_ powerpc.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu xdmx-tools_1.6.4-2ubuntu4.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xorg-server/xdmx-too ls_1.6.4-2ubuntu4.3_amd64.deb


• Ubuntu xdmx_1.6.4-2ubuntu4.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xorg-server/xdmx_1.6 .4-2ubuntu4.3_amd64.deb


• Ubuntu xnest_1.6.4-2ubuntu4.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xnest_1.6.4- 2ubuntu4.3_amd64.deb


• Ubuntu xserver-common_1.6.4-2ubuntu4.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-comm on_1.6.4-2ubuntu4.3_all.deb


• Ubuntu xserver-xephyr_1.6.4-2ubuntu4.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xeph yr_1.6.4-2ubuntu4.3_amd64.deb


• Ubuntu xserver-xfbdev_1.6.4-2ubuntu4.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xorg-server/xserver- xfbdev_1.6.4-2ubuntu4.3_amd64.deb


• Ubuntu xserver-xorg-core-dbg_1.6.4-2ubuntu4.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -core-dbg_1.6.4-2ubuntu4.3_amd64.deb


• Ubuntu xserver-xorg-core_1.6.4-2ubuntu4.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -core_1.6.4-2ubuntu4.3_amd64.deb


• Ubuntu xserver-xorg-dev_1.6.4-2ubuntu4.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -dev_1.6.4-2ubuntu4.3_amd64.deb


• Ubuntu xvfb_1.6.4-2ubuntu4.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xvfb_1.6.4-2 ubuntu4.3_amd64.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu xnest_1.4.1~git20080131-1ubuntu9.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xnest_1.4.1~ git20080131-1ubuntu9.3_i386.deb


• Ubuntu xserver-xephyr_1.4.1~git20080131-1ubuntu9.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xeph yr_1.4.1~git20080131-1ubuntu9.3_i386.deb


• Ubuntu xserver-xorg-core-dbg_1.4.1~git20080131-1ubuntu9.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -core-dbg_1.4.1~git20080131-1ubuntu9.3_i386.deb


• Ubuntu xserver-xorg-core_1.4.1~git20080131-1ubuntu9.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -core_1.4.1~git20080131-1ubuntu9.3_i386.deb


• Ubuntu xserver-xorg-dev_1.4.1~git20080131-1ubuntu9.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -dev_1.4.1~git20080131-1ubuntu9.3_i386.deb


• Ubuntu xvfb_1.4.1~git20080131-1ubuntu9.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xvfb_1.4.1~g it20080131-1ubuntu9.3_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu xnest_1.4.1~git20080131-1ubuntu9.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xnest_1.4.1~ git20080131-1ubuntu9.3_amd64.deb


• Ubuntu xserver-xephyr_1.4.1~git20080131-1ubuntu9.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xeph yr_1.4.1~git20080131-1ubuntu9.3_amd64.deb


• Ubuntu xserver-xorg-core-dbg_1.4.1~git20080131-1ubuntu9.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -core-dbg_1.4.1~git20080131-1ubuntu9.3_amd64.deb


• Ubuntu xserver-xorg-core_1.4.1~git20080131-1ubuntu9.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -core_1.4.1~git20080131-1ubuntu9.3_amd64.deb


• Ubuntu xserver-xorg-dev_1.4.1~git20080131-1ubuntu9.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -dev_1.4.1~git20080131-1ubuntu9.3_amd64.deb


• Ubuntu xvfb_1.4.1~git20080131-1ubuntu9.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xvfb_1.4.1~g it20080131-1ubuntu9.3_amd64.deb

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu xdmx-tools_1.6.4-2ubuntu4.3_lpia.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xdmx-tools_1.6.4-2 ubuntu4.3_lpia.deb


• Ubuntu xdmx_1.6.4-2ubuntu4.3_lpia.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xdmx_1.6.4-2ubuntu 4.3_lpia.deb


• Ubuntu xnest_1.6.4-2ubuntu4.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xnest_1.6.4-2ubuntu4.3 _lpia.deb


• Ubuntu xserver-common_1.6.4-2ubuntu4.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-comm on_1.6.4-2ubuntu4.3_all.deb


• Ubuntu xserver-xephyr_1.6.4-2ubuntu4.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xephyr_1.6.4-2 ubuntu4.3_lpia.deb


• Ubuntu xserver-xfbdev_1.6.4-2ubuntu4.3_lpia.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xserver-xfbdev_1.6 .4-2ubuntu4.3_lpia.deb


• Ubuntu xserver-xorg-core-dbg_1.6.4-2ubuntu4.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core-dbg_ 1.6.4-2ubuntu4.3_lpia.deb


• Ubuntu xserver-xorg-core_1.6.4-2ubuntu4.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core_1.6. 4-2ubuntu4.3_lpia.deb


• Ubuntu xserver-xorg-dev_1.6.4-2ubuntu4.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-dev_1.6.4 -2ubuntu4.3_lpia.deb


• Ubuntu xvfb_1.6.4-2ubuntu4.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xvfb_1.6.4-2ubuntu4.3_ lpia.deb

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu xdmx-tools_1.6.0-0ubuntu14.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xorg-server/xdmx-too ls_1.6.0-0ubuntu14.2_amd64.deb


• Ubuntu xdmx_1.6.0-0ubuntu14.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xorg-server/xdmx_1.6 .0-0ubuntu14.2_amd64.deb


• Ubuntu xnest_1.6.0-0ubuntu14.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xnest_1.6.0- 0ubuntu14.2_amd64.deb


• Ubuntu xserver-common_1.6.0-0ubuntu14.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-comm on_1.6.0-0ubuntu14.2_all.deb


• Ubuntu xserver-xephyr_1.6.0-0ubuntu14.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xorg-server/xserver- xephyr_1.6.0-0ubuntu14.2_amd64.deb


• Ubuntu xserver-xfbdev_1.6.0-0ubuntu14.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xorg-server/xserver- xfbdev_1.6.0-0ubuntu14.2_amd64.deb


• Ubuntu xserver-xorg-core-dbg_1.6.0-0ubuntu14.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -core-dbg_1.6.0-0ubuntu14.2_amd64.deb


• Ubuntu xserver-xorg-core_1.6.0-0ubuntu14.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -core_1.6.0-0ubuntu14.2_amd64.deb


• Ubuntu xserver-xorg-dev_1.6.0-0ubuntu14.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-xorg -dev_1.6.0-0ubuntu14.2_amd64.deb


• Ubuntu xvfb_1.6.0-0ubuntu14.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xvfb_1.6.0-0 ubuntu14.2_amd64.deb

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu xdmx-tools_1.6.0-0ubuntu14.2_sparc.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xdmx-tools_1.6.0-0 ubuntu14.2_sparc.deb


• Ubuntu xdmx_1.6.0-0ubuntu14.2_sparc.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xdmx_1.6.0-0ubuntu 14.2_sparc.deb


• Ubuntu xnest_1.6.0-0ubuntu14.2_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xnest_1.6.0-0ubuntu14. 2_sparc.deb


• Ubuntu xserver-common_1.6.0-0ubuntu14.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-comm on_1.6.0-0ubuntu14.2_all.deb


• Ubuntu xserver-xephyr_1.6.0-0ubuntu14.2_sparc.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xserver-xephyr_1.6 .0-0ubuntu14.2_sparc.deb


• Ubuntu xserver-xfbdev_1.6.0-0ubuntu14.2_sparc.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xserver-xfbdev_1.6 .0-0ubuntu14.2_sparc.deb


• Ubuntu xserver-xorg-core-dbg_1.6.0-0ubuntu14.2_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core-dbg_ 1.6.0-0ubuntu14.2_sparc.deb


• Ubuntu xserver-xorg-core_1.6.0-0ubuntu14.2_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core_1.6. 0-0ubuntu14.2_sparc.deb


• Ubuntu xserver-xorg-dev_1.6.0-0ubuntu14.2_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-dev_1.6.0 -0ubuntu14.2_sparc.deb


• Ubuntu xvfb_1.6.0-0ubuntu14.2_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xvfb_1.6.0-0ubuntu14.2 _sparc.deb

Ubuntu Ubuntu Linux 9.04 powerpc

• Ubuntu xdmx-tools_1.6.0-0ubuntu14.2_powerpc.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xdmx-tools_1.6.0-0 ubuntu14.2_powerpc.deb


• Ubuntu xdmx_1.6.0-0ubuntu14.2_powerpc.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xdmx_1.6.0-0ubuntu 14.2_powerpc.deb


• Ubuntu xnest_1.6.0-0ubuntu14.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xnest_1.6.0-0ubuntu14. 2_powerpc.deb


• Ubuntu xserver-common_1.6.0-0ubuntu14.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xorg-server/xserver-comm on_1.6.0-0ubuntu14.2_all.deb


• Ubuntu xserver-xephyr_1.6.0-0ubuntu14.2_powerpc.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xserver-xephyr_1.6 .0-0ubuntu14.2_powerpc.deb


• Ubuntu xserver-xfbdev_1.6.0-0ubuntu14.2_powerpc.deb
  http://ports.ubuntu.com/pool/universe/x/xorg-server/xserver-xfbdev_1.6 .0-0ubuntu14.2_powerpc.deb


• Ubuntu xserver-xorg-core-dbg_1.6.0-0ubuntu14.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core-dbg_ 1.6.0-0ubuntu14.2_powerpc.deb


• Ubuntu xserver-xorg-core_1.6.0-0ubuntu14.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core_1.6. 0-0ubuntu14.2_powerpc.deb


• Ubuntu xserver-xorg-dev_1.6.0-0ubuntu14.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-dev_1.6.0 -0ubuntu14.2_powerpc.deb


• Ubuntu xvfb_1.6.0-0ubuntu14.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xvfb_1.6.0-0ubuntu14.2 _powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu xnest_1.4.1~git20080131-1ubuntu9.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xnest_1.4.1~git2008013 1-1ubuntu9.3_lpia.deb


• Ubuntu xserver-xephyr_1.4.1~git20080131-1ubuntu9.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xephyr_1.4.1~g it20080131-1ubuntu9.3_lpia.deb


• Ubuntu xserver-xorg-core-dbg_1.4.1~git20080131-1ubuntu9.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core-dbg_ 1.4.1~git20080131-1ubuntu9.3_lpia.deb


• Ubuntu xserver-xorg-core_1.4.1~git20080131-1ubuntu9.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-core_1.4. 1~git20080131-1ubuntu9.3_lpia.deb


• Ubuntu xserver-xorg-dev_1.4.1~git20080131-1ubuntu9.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xserver-xorg-dev_1.4.1 ~git20080131-1ubuntu9.3_lpia.deb


• Ubuntu xvfb_1.4.1~git20080131-1ubuntu9.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xorg-server/xvfb_1.4.1~git20080131 -1ubuntu9.3_lpia.deb

xvfb-run Insecure Magic Cookie Local Information Disclosure Vulnerability

References:

• Debian Bug report logs - #526678 Debian Bug report logs - #526678 (Loïc Minier )
  
• Re: CVE id request: Debian/Ubuntu specific issue in xvfb-run (xorg) (Nico Golde)
  
• xvfb-run Hompage (xvfb-run)