CVE-2002-1510: XFREE86 Project x11r6

High severity, CVSS 10.0. EPSS: 2% chance of exploitation in the next 30 days.

xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist.

Affected products

• XFREE86 Project x11r6: any version

Published 2003-03-03. Last modified 2026-06-16.