CVE-2009-1756

Published: May 22, 2009Modified: Apr 23, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments.

Affected (1)

Products: Simone Rota: Slim Simple Login Manager

Simone Rota

1 product

Slim Simple Login Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Simone Rota Slim Simple Login Manager	Version 1.3.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (18)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529306

Source: cve@mitre.org

Exploit

http://osvdb.org/54583

Source: cve@mitre.org

http://secunia.com/advisories/35132

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/38070

Source: cve@mitre.org

Vendor Advisory

http://www.openwall.com/lists/oss-security/2009/05/18/2

Source: cve@mitre.org

http://www.securityfocus.com/bid/35015

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/50611

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00000.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00009.html

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529306