This is related to a 1995 CERT advisory:
http://packetstorm.securify.com/advisories/mci/iMCISE:MIIGS:XVUL:1102:95:P1:
R1
It may be a misconfiguration issue, at best. However, since it's been
brought up again, it is worthwhile reexamining the code concerned. Cruft is
bad.
I have forwarded the post to the XFree86 devel group with my two cents.
Andrew
-----Original Message-----
From: Cyril Diakhate [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, 4 July 2001 16:52
To: [EMAIL PROTECTED]
Subject: xdm cookies fast brute force
##
## advisory for xdm cookies fast brute force
##