Xfree86 Project

Records39All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

Xfree86 Project records in CISA KEV

No Xfree86 Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X11r6 27 records MEDIUM Xfree86 4 records LOW Xfree86 X 2 records LOW Xfree86 X Server 2 records MEDIUM Xdm 1 record LOW Xfce 1 record LOW Xfree86-misc 1 record MEDIUM Xlib 1 record LOW

Records

1 record in Xfce · all components

TI-2000-01050 CVE-2000-1060 · GHSA-62f9-2rc4-4vfq

The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism…

LOW 21

The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00337 Published 2001-01-22 No fix listed

Open these records in search →

Critical	7
High	20
Medium	10
Low	2
No CVSS	0