CVE:CVE-2000-1059
CNNVD:CNNVD-200012-040
Mandrake Linux 7.1和7.0版本的Xsession文件的默认配置绕过带“xhost + localhost”命令的Xauthority访问控制机制。本地用户发觉 X Windows事件和提升特权。
solution:Upgrade mandrakesoft mandrake_linux to a higher version than 7.0,7.1,and avoid the version 7.0,7.1