CVE-1999-0526

An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

20.82% chance of exploitation in the next 30 days, 98th percentile

Published

1999-09-29

Updated

2024-08-01

Metasploit modules (3)

• rapid7/metasploit-framework/blob/master/modules/exploits/unix/x11/x11_keyboard_exec.rb
• rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/x11_keyboard_spy.rb
• rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/x11/open_x11.rb

Security advisories

• http://www.kb.cert.org/vuls/id/704969

References

• CVE Record
• NVD entry