|
|
| |
|
| |
slim: X session hijacking
| Package(s): | slim |
CVE #(s): | CVE-2009-1756
|
| Created: | January 4, 2010 |
Updated: | September 9, 2010 |
| Description: |
From the Red Hat bugzilla entry:
Potential man-in-the-middle attack was found in SLiM (Simple Login Manager)
due to improper processing of authorization information used in connection
to the X server. A local attacker could use this flaw to hijack X session
of the victim by overhearing of certain information, needed for proper
extraction of authorization records.
|
| Alerts: |
|
( Log in to post comments)
|
|
|