CVE-1999-0526
EXPLOITEDX Server - Info Disclosure
Title source: llmDescription
An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.
Exploits (3)
metasploit
WORKING POC
EXCELLENT
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/x11/x11_keyboard_exec.rb
metasploit
SCANNER
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/x11/open_x11.rb
metasploit
WORKING POC
by h00die, nir tzachar · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/x11_keyboard_spy.rb
Scores
EPSS
0.7075
EPSS Percentile
98.7%
Exploitation Intel
VulnCheck KEV
2025-02-27
Classification
Status
draft
Affected Products (1)
x.org/x11
Timeline
Published
Jul 01, 1997
Tracked Since
Feb 18, 2026