CVE-2004-0419
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which...
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
Exploit likelihood
What each source reports
NVD Score used
7.5
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
- Record
CVE-2004-0419- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
- Record
CVE-2004-0419- Updated
- 2026-11-02
EUVDEUVD-2004-0418 No score
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
- Record
EUVD-2004-0418- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xcpv-777v-f4v3 No score
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which...
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
- Record
GHSA-xcpv-777v-f4v3- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
XFree86Red Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-100dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-75dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-14-100dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-14-75dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-15-100dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-15-75dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-2-100dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-2-75dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-9-100dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
Show 110 moreShow less
| Package | Affected | Fixed |
|---|---|---|
XFree86-ISO8859-9-75dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-Mesa-libGLRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-Mesa-libGLURed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-XnestRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-XvfbRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-base-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-cyrillic-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-develRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-docRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-font-utilsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-libsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-libs-dataRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-sdkRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-syriac-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-toolsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-truetype-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-twmRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-xauthRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-xdmRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-xfsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86Red Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-100dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-75dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-14-100dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-14-75dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-15-100dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-15-75dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-2-100dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-2-75dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-9-100dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-9-75dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-Mesa-libGLRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-Mesa-libGLURed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-XnestRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-XvfbRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-base-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-cyrillic-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-develRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-docRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-font-utilsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-libsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-libs-dataRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-sdkRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-syriac-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-toolsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-truetype-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-twmRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-xauthRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-xdmRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-xfsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86Red Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-100dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-75dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-14-100dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-14-75dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-15-100dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-15-75dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-2-100dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-2-75dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-9-100dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-9-75dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-Mesa-libGLRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-Mesa-libGLURed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-XnestRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-XvfbRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-base-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-cyrillic-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-develRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-docRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-font-utilsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-libsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-libs-dataRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-sdkRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-syriac-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-toolsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-truetype-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-twmRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-xauthRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-xdmRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-xfsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86Red Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-100dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-75dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-14-100dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-14-75dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-15-100dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-15-75dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-2-100dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-2-75dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-9-100dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-ISO8859-9-75dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-Mesa-libGLRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-Mesa-libGLURed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-XnestRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-XvfbRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-base-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-cyrillic-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-develRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-docRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-font-utilsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-libsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-libs-dataRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-sdkRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-syriac-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-toolsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-truetype-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-twmRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-xauthRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-xdmRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
XFree86-xfsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-69.EL | 0:4.3.0-69.EL |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0419 is a high vulnerability (CVSS 7.5) in Xfree86 Project Xdm, published June 3, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.48%, the 84th percentile. Fixed in XFree86 0:4.3.0-69.EL.
References
secunia.com/advisories/12019
exchange.xforce.ibmcloud.com/vulnerabilities/16264
bugs.xfree86.org/show_bug.cgi?id=1376
mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161
gentoo.org/security/en/glsa/glsa-200407-05.xml
Show 31 moreShow less
ciac.org/ciac/bulletins/p-001.shtml
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900
securityfocus.com/bid/10423
securitytracker.com/id?1010306
openbsd.org/errata.html
redhat.com/support/errata/RHSA-2004-478.html
nvd.nist.gov/vuln/detail/CVE-2004-0419
github.com/advisories/GHSA-xcpv-777v-f4v3
access.redhat.com/errata/RHSA-2004:478
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=124901
bugzilla.redhat.com/show_bug.cgi?id=126205
bugzilla.redhat.com/show_bug.cgi?id=129744
bugzilla.redhat.com/show_bug.cgi?id=131121
bugzilla.redhat.com/show_bug.cgi?id=132121
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_478.json
access.redhat.com/security/cve/CVE-2004-0419
bugzilla.redhat.com/show_bug.cgi?id=1617203
cve.org/CVERecord?id=CVE-2004-0419
access.redhat.com/security/cve/CVE-2004-0687
bugzilla.redhat.com/show_bug.cgi?id=430513
cve.org/CVERecord?id=CVE-2004-0687
nvd.nist.gov/vuln/detail/CVE-2004-0687
access.redhat.com/security/cve/CVE-2004-0688
bugzilla.redhat.com/show_bug.cgi?id=430515
cve.org/CVERecord?id=CVE-2004-0688
nvd.nist.gov/vuln/detail/CVE-2004-0688
access.redhat.com/security/cve/CVE-2004-0692
bugzilla.redhat.com/show_bug.cgi?id=1617253
cve.org/CVERecord?id=CVE-2004-0692
nvd.nist.gov/vuln/detail/CVE-2004-0692