Vulnerability Report

CVE-2000-0374

Title: kdm default configuration allows unrestricted XDMCP connections

Other

Proof Of Concept

No public PoC currently indexed for CVE-2000-0374.

CWE Category NVD-CWE-noinfo

Published Date Aug 22, 1999

Modified Date Jun 16, 2026

Exploit Status Not Found

Score 10.0 CVSS v2.0

Exploit Probability (EPSS)

4.20%

Vulnerability Summary

CVE-2000-0374: The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions.

Impacted Vendors

caldera 1

Reference Links

ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-021.0.txt http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:025 http://www.securityfocus.com/bid/1446 https://exchange.xforce.ibmcloud.com/vulnerabilities/4856 ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-021.0.txt http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:025 http://www.securityfocus.com/bid/1446 https://exchange.xforce.ibmcloud.com/vulnerabilities/4856

CVSS v2.0

Source Entity [email protected]

Severity HIGH

10.0

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:C/I:C/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2000-0374 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 03, 2025 MODIFIED

Vulnerability data or affected products updated.

August 22, 1999 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected Stack

No specific products linked.