| Package | Affected versions | Patched versions |
|---|---|---|
| xfce | = 3.5.1 |
The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free