| Package | Affected versions | Patched versions |
|---|---|---|
| gnuserv | < 3.12 | 3.12 |
gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free