CVEvulnerability

CVE-2000-0374

10.0 HIGH Published 1999-08-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1999-08-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions.

Affected configurations

• caldera openlinux 2.2 • caldera openlinux 2.3

References