CVE-2004-0419

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.

• http://bugs.xfree86.org/show_bug.cgi?id=1376
• http://secunia.com/advisories/12019
• http://securitytracker.com/id?1010306
• http://www.ciac.org/ciac/bulletins/p-001.shtml
• http://www.gentoo.org/security/en/glsa/glsa-200407-05.xmlVendor Advisory
• http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073Patch, Vendor Advisory
• http://www.openbsd.org/errata.html#xdm
• http://www.redhat.com/support/errata/RHSA-2004-478.html
• http://www.securityfocus.com/bid/10423Patch, Vendor Advisory
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16264
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161
• http://bugs.xfree86.org/show_bug.cgi?id=1376
• http://secunia.com/advisories/12019
• http://securitytracker.com/id?1010306
• http://www.ciac.org/ciac/bulletins/p-001.shtml
• http://www.gentoo.org/security/en/glsa/glsa-200407-05.xmlVendor Advisory
• http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073Patch, Vendor Advisory
• http://www.openbsd.org/errata.html#xdm
• http://www.redhat.com/support/errata/RHSA-2004-478.html
• http://www.securityfocus.com/bid/10423Patch, Vendor Advisory
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16264
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161

Published

Aug 18, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0413libsvn_ra_svn in Subversion 1.0.4 trusts the length field of…
• CVE-2004-0414CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does …
• CVE-2004-0415Linux kernel does not properly convert 64-bit file offset po…
• CVE-2004-0416Double free vulnerability for the error_prog_name string in …
• CVE-2004-0417Integer overflow in the "Max-dotdot" CVS protocol command (s…
• CVE-2004-0418serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x throug…
• CVE-2004-0420The Windows Shell application in Windows 98, Windows ME, Win…
• CVE-2004-0421The Portable Network Graphics library (libpng) 1.0.15 and ea…
• CVE-2004-0422flim before 1.14.3 creates temporary files insecurely, which…
• CVE-2004-0423The log_event function in ssmtp 2.50.6 and earlier allows lo…
• CVE-2004-0424Integer overflow in the ip_setsockopt function in Linux kern…
• CVE-2004-0425Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x…