CVE-2009-1756
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line...
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments.
Exploit likelihood
What each source reports
NVD Score used
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments.
- Record
CVE-2009-1756- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments.
- Record
CVE-2009-1756- Updated
- 2026-11-02
EUVDEUVD-2009-1751 No score
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments.
- Record
EUVD-2009-1751- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9vgj-3874-c5g7 No score
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line...
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments.
- Record
GHSA-9vgj-3874-c5g7- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments.
- Record
CVE-2009-1756- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-1756 No score
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments.
- Record
DEBIAN-CVE-2009-1756- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1756 is a low vulnerability (CVSS 2.1) in Simone Rota Slim Simple Login Manager, published May 22, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. Fixed in slim 1.3.1-2.