CVE-2001-1086: XFREE86 Project x11r6

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack.

Affected products

• XFREE86 Project x11r6: version 3.3 only; version 3.3.3 only

Published 2001-07-04. Last modified 2026-06-16.