Debian Information for VU#911505
pam_xauth may insecurely forward "X MIT-Magic-Cookies" to new sessions
- Vendor Information Help Date Notified: 04 May 2003
- Statement Date:
- Date Updated: 05 May 2003
Debian does not, and has never, shipped pam_xauth.
The vendor has not provided us with any further information regarding this vulnerability.
The CERT/CC has no additional comments at this time.