CVE-2000-1059
mandrakesoft mandrake linux: no CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days.
The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges.
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-11-01)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mandrakesoft:mandrake_linux