When "xdm" starts up, it creates a random high-numbered port
that is apparently vulnerable to buffer overruns. The following
is an extremely stone-knives-and-bearskins hack to deal with
this problem, useful for those of us who just run X on a single
machine and don't use "chooser".
Get the source for "xdm" and comment out the line
chooserFd = socket (AF_INET, SOCK_STREAM, 0);
in the file "socket.c". Build and install. That's it.
This closes that particular hole, abeit crudely. xdm starts
up, seems to run normally, and does not create that random high-
numbered port.
Works for me under RedHat 4.2 (Linux 2.0.33), your mileage may vary.
This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:54:07 PDT