What’s Vulnerable › Vulnerabilities

CVE-2002-1510

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2003-03-03 · updated 2026-06-16

Description

xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist.

Affected products

• Xfree86 Project X11R6: all versions

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000533
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55602
• http://wuarchive.wustl.edu/mirrors/NetBSD/NetBSD-current/xsrc/xfree/xc/programs/Xserver/hw/xfree86/CHANGELOG
• http://www.iss.net/security_center/static/11389.php
• http://www.redhat.com/support/errata/RHSA-2003-064.html
• http://www.redhat.com/support/errata/RHSA-2003-065.html
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000533
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55602
• http://wuarchive.wustl.edu/mirrors/NetBSD/NetBSD-current/xsrc/xfree/xc/programs/Xserver/hw/xfree86/CHANGELOG
• http://www.iss.net/security_center/static/11389.php
• http://www.redhat.com/support/errata/RHSA-2003-064.html
• http://www.redhat.com/support/errata/RHSA-2003-065.html

Get alerted when CVE-2002-1510 or the next vulnerability affects your stack