CVE-2000-0491

Published: May 24, 2000Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request.

Affected (4)

Products: Gnome: Gdm · Caldera: Openlinux · Suse: Suse Linux

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnome Gdm	Version 1.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Caldera Openlinux	All versions
Suse Suse Linux	Version 6.2
Suse Suse Linux	Version 6.4

References (14)

ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-013.0.txt (unsafe URL)

Source: cve@mitre.org

PatchVendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2000-05/0241.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2000-06/0025.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/suse_security_announce_49.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/1233

Source: cve@mitre.org

http://www.securityfocus.com/bid/1279

Source: cve@mitre.org

http://www.securityfocus.com/bid/1370

Source: cve@mitre.org

ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-013.0.txt (unsafe URL)