Vulnerability Details CVE-2000-0491
Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.069
EPSS Ranking 90.9%
CVSS Severity
CVSS v2 Score 10.0
References
- ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-013.0.txt
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0241.html
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0025.html
- http://www.novell.com/linux/security/advisories/suse_security_announce_49.html
- http://www.securityfocus.com/bid/1233
- http://www.securityfocus.com/bid/1279
- http://www.securityfocus.com/bid/1370
- ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-013.0.txt
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0241.html
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0025.html
- http://www.novell.com/linux/security/advisories/suse_security_announce_49.html
- http://www.securityfocus.com/bid/1233
- http://www.securityfocus.com/bid/1279
- http://www.securityfocus.com/bid/1370
Products affected by CVE-2000-0491
-
cpe:2.3:a:gnome:gdm:1.0
-
cpe:2.3:o:caldera:openlinux:*
-
cpe:2.3:o:suse:suse_linux:6.2
-
cpe:2.3:o:suse:suse_linux:6.4