CVE-2001-1086

critical

Description

XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/6808

https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-1067

http://www.securityfocus.com/bid/2985

http://www.securityfocus.com/archive/1/194907

http://online.securityfocus.com/archive/1/195008

Details

Source: Mitre, NVD

Published: 2001-07-04

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.03174

Detections

Analytics