OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1998: quickie fix to xdm port problem

quickie fix to xdm port problem

id est (mrnSHAW.WAVE.CA)
Tue, 19 May 1998 08:16:46 -0600 

When "xdm" starts up, it creates a random high-numbered port
that is apparently vulnerable to buffer overruns.  The following
is an extremely stone-knives-and-bearskins hack to deal with
this problem, useful for those of us who just run X on a single
machine and don't use "chooser".

Get the source for "xdm" and comment out the line

    chooserFd = socket (AF_INET, SOCK_STREAM, 0);

in the file "socket.c".  Build and install.  That's it.

This closes that particular hole, abeit crudely.  xdm starts
up, seems to run normally, and does not create that random high-
numbered port.

Works for me under RedHat 4.2 (Linux 2.0.33), your mileage may vary.