Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-1086. PoCs published by ntf & sky.
AI-analyzed exploit summary This exploit targets a vulnerability in xdm (X Display Manager) where the session cookie is generated using predictable values from gettimeofday(). The PoC brute-forces the cookie by iterating through possible values derived from the timestamp.
Description
XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack.
Exploits (1)
This exploit targets a vulnerability in xdm (X Display Manager) where the session cookie is generated using predictable values from gettimeofday(). The PoC brute-forces the cookie by iterating through possible values derived from the timestamp.