Total vulnerabilities in the database
The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges.
| Software | From | Fixed in |
|---|---|---|
| mandrakesoft / mandrake_linux | 7.0 | 7.0.x |
| mandrakesoft / mandrake_linux | 7.1 | 7.1.x |