CVE-1999-0526
EXPLOITEDX.org X11 - Unauthenticated Access Control Bypass via xhost Command
Title source: llmExploitation Summary
CVE-1999-0526 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including h00die, nir tzachar, including a Metasploit module auxiliary/scanner/x11/open_x11.
AI-analyzed exploit summary This Metasploit module scans for X11 servers that allow unauthenticated connections. It checks for open X11 servers on port 6000 and reports connection details if successful.
Description
An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.
Exploits (3)
This Metasploit module scans for X11 servers that allow unauthenticated connections. It checks for open X11 servers on port 6000 and reports connection details if successful.
This Metasploit module exploits an X11 session to log keystrokes by creating a background window and binding a keyboard to it. It polls the keyboard state at a high rate to capture key presses, though it may miss or repeat keystrokes due to polling limitations.
This Metasploit module exploits open X11 servers by registering a virtual keyboard to simulate keystrokes, opening a terminal, and executing arbitrary commands. It leverages the X11 protocol to inject commands via synthetic keyboard input.