RE: xdm cookies fast brute force

["Andrew van der Stock" <ajv () e-secure com au>]

This is related to a 1995 CERT advisory:

http://packetstorm.securify.com/advisories/mci/iMCISE:MIIGS:XVUL:1102:95:P1:
R1

It may be a misconfiguration issue, at best. However, since it's been
brought up again, it is worthwhile reexamining the code concerned. Cruft is
bad.

I have forwarded the post to the XFree86 devel group with my two cents.

Andrew

-----Original Message-----
From: Cyril Diakhate [mailto:diakhate () easynet fr]
Sent: Wednesday, 4 July 2001 16:52
To: bugtraq () securityfocus com
Subject: xdm cookies fast brute force


##
## advisory for xdm cookies fast brute force
##