Bugtraq mailing list archives

xlock vulnerability

From: bind <bind () SUBTERRAIN NET>
Date: Tue, 15 Aug 2000 23:17:24 -0700

Hello,

A format bug exists in all X11R6 xlock's handling of the display ('-d') option.

(bind@cassius ~) $ xlock -d %x%x%x%x%x
xlock: unable to open display dfbfd958402555e1ea748dfbfd958dfbfd654.

Systems that we tested that were vulnerable included OpenBSD 2.7, FreeBSD
4.1 and Slackware 7.1.

The patch is attached.

        -bind

Attachment: xlock.c.diff
Description:

Current thread:

xlock vulnerability bind (Aug 16)
- <Possible follow-ups>
- Re: xlock vulnerability Thomas Biege (Aug 18)