SCO Security Advisory – The CDE dtlogin utility has a double-free vulnerability in the X Display Manager Control Protocol (XDMCP). By sending a specially-crafted XDMCP packet to a vulnerable system, a remote attacker could obtain sensitive information, cause a denial of service or execute arbitrary code on the system.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/37075/SCOSA-2005.18.txt
Source: https://packetstormsecurity.com/files/37075/SCOSA-2005.18.txt.html