CVE-2000-1060

MEDIUM · CVSS 4.6 EPSS 0.34%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2000-12-11 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2000-1060

Severity

MEDIUM

CVSS

4.6

EPSS

0.34%

Windows

Original NVD Description

The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges.