Vulnerability Name:

CVE-2000-0620 (CCN-4996)

Assigned:2000-06-19
Published:2000-06-19
Updated:2017-10-10
Summary:libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Denial of Service
References:Source: CCN
Type: BugTraq Mailing List, Mon Jun 19 2000 - 17:51:30 CDT
XFree86: Various nasty libX11 holes

Source: MITRE
Type: CNA
CVE-2000-0620

Source: BUGTRAQ
Type: UNKNOWN
20000619 XFree86: Various nasty libX11 holes

Source: CCN
Type: OSVDB ID: 1431
X.Org X Window System (X11) libX11 X Library Mask 0 Local DoS

Source: BID
Type: Exploit, Patch, Vendor Advisory
1409

Source: CCN
Type: BID-1409
XDMCP Infinite Loop Denial of Service Vulnerability

Source: XF
Type: UNKNOWN
libx11-infinite-loop-dos(4996)

Source: XF
Type: UNKNOWN
libx11-infinite-loop-dos(4996)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:open_group:x:11.0r6:*:*:*:*:*:*:*
  • OR cpe:/a:open_group:x:11.0r6.1:*:*:*:*:*:*:*
  • OR cpe:/a:open_group:x:11.0r6.2:*:*:*:*:*:*:*
  • OR cpe:/a:open_group:x:11.0r6.3:*:*:*:*:*:*:*
  • OR cpe:/a:open_group:x:11.0r6.4:*:*:*:*:*:*:*
  • OR cpe:/a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:*
  • OR cpe:/a:xfree86_project:x11r6:3.3.4:*:*:*:*:*:*:*
  • OR cpe:/a:xfree86_project:x11r6:3.3.5:*:*:*:*:*:*:*
  • OR cpe:/a:xfree86_project:x11r6:3.3.6:*:*:*:*:*:*:*
  • OR cpe:/a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    open_group x 11.0r6
    open_group x 11.0r6.1
    open_group x 11.0r6.2
    open_group x 11.0r6.3
    open_group x 11.0r6.4
    xfree86_project x11r6 3.3.3
    xfree86_project x11r6 3.3.4
    xfree86_project x11r6 3.3.5
    xfree86_project x11r6 3.3.6
    xfree86_project x11r6 4.0