Bugtraq mailing list archives

Re: Is _your_ Netscape under remote control


From: mouse () Collatz McRCIM McGill EDU (der Mouse)
Date: Tue, 28 May 1996 19:18:16 -0400


I have seen X servers that neglect to mark events as synthetic if you
do an XSendEvent w/o setting the synthetic field to be true.

That's a pretty crippling security bug.  Which server(s)?  I want to
stay as far away from them as possible - not only are they grossly
insecure, but who knows what else they got wrong.

                                        der Mouse

                            mouse () collatz mcrcim mcgill edu



Current thread: