CVE-2009-1756

Publication date

2009-05-22 01:00:00

Family

mitre

State

PUBLISHED

Description

SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments.