CVE-2009-1756: Simone Rota Slim Simple Login Manager

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments.

Affected products

• Simone Rota Slim Simple Login Manager: version 1.3.0 only

Published 2009-05-22. Last modified 2026-06-16.