← Database

CVE-2009-1756

LOW CVSS: 2.1 Published: 2009-05-22 Modified: 2026-06-16

Description

SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments.

Affected Platforms

Simone Rota Slim Simple Login Manager

Weakness Type

CWE-200

References