CVE-2004-0419: Gentoo Linux

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.

Affected products

• Gentoo Linux: version 1.4 only
• X.org x11r6: version 6.7.0 only
• XFREE86 Project Xdm: version cvs only

Published 2004-08-18. Last modified 2026-06-16.