CVE-2002-1160: The default configuration of the pam_xauth module forwards MIT-Magic-Cookies to new X sessions, which could...

Security readout for executives and security teams

CVE-2002-1160 is a local privilege-escalation issue in pam_xauth behavior around X11 authentication. When root uses su, temporary X authority cookies may be created in a way local users can steal, potentially leading to root compromise. The bundle does not provide CVSS or precise affected versions. Exposure is most likely on older Unix or Linux systems using pam_xauth for su with X11 authentication forwarding enabled. The source bundle does not identify exact affected products, versions, or CPEs, so validation must be environment-specific. Prioritize legacy administrative workstations and servers where local users share access with privileged administrators. The business risk is root compromise from a local foothold, but urgency is tempered by missing version data and no cited active exploitation. Mitigation focus: Review applicable vendor advisories for pam_xauth, PAM, su, and sh-utils updates.; Apply relevant vendor security updates where systems match advisory scope.; Review su PAM configuration for pam_xauth use and vendor-supported hardening options..

Prepared

Jun 30, 2026, 03:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.