GNOME显示管理器缓存文件处理特权提升漏洞

GNOME Display Manager是一款图形登录程序。 在会话终止过程中，在缓存目录中/var/cache/gdm/USER处理dmrc和face图标文件时存在竞争条件错误，通过符号链接可更改任意文件的属主，可能被利用提升特权。 GNOME Display Manager GDM 2.x 厂商解决方案 GNOME Display Manager GDM 2.32.1已经修复此漏洞，建议用户下载使用： http://www.jirka.org/gdm.html...

CVE-2011-0727: Improper Link Resolution Before File Access

GNOME Display Manager gdm 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a 1 dmrc or 2 face icon file under /var/cache/gdm/...

Debian DSA-2205-1 : gdm3 - privilege escalation

Sebastian Krahmer discovered that GDM 3, the GNOME Display Manager, does not properly drop privileges when manipulating files related to the logged-in user. As a result, local users can gain root privileges. The oldstable distribution lenny does not contain a gdm3 package. The gdm package is not...

CVE-2011-0727

GNOME Display Manager gdm 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a 1 dmrc or 2 face icon file under /var/cache/gdm/...

Moderate: Red Hat Security Advisory: gdm security update

Updated gdm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

gdm: privilege escalation vulnerability

GNOME Display Manager gdm 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a 1 dmrc or 2 face icon file under /var/cache/gdm/...

RedHat Update for gdm RHSA-2010:0657-02

Check for the Version of gdm OpenVAS Vulnerability Test RedHat Update for gdm RHSA-2010:0657-02 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

CentOS 4 : gdm (CESA-2010:0657)

An updated gdm package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

gdm security update

CentOS Errata and Security Advisory CESA-2010:0657 An updated gdm package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS...

gdm with xdmcp ignoring tcp_wrappers on x86_64

Red Hat Enterprise Linux 4 does not properly compile and link gdm with tcpwrappers on x8664 platforms, which might allow remote attackers to bypass intended access restrictions...

Low: Red Hat Security Advisory: gdm security and bug fix update

An updated gdm package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

CentOS Update for kdebase CESA-2010:0348 centos4 i386

Check for the Version of kdebase OpenVAS Vulnerability Test CentOS Update for kdebase CESA-2010:0348 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Ubuntu Update for kdebase-workspace vulnerability USN-932-1

Ubuntu Update for Linux kernel vulnerabilities USN-932-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9321.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for kdebase-workspace vulnerability USN-932-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-932-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-932-1: KDM vulnerability

Sebastian Krahmer discovered a race condition in the KDE Display Manager KDM. A local attacker could exploit this to change the permissions on arbitrary files, thus allowing privilege escalation...

Debian DSA-2037-1 : kdm (kdebase) - race condition

Sebastian Krahmer discovered that a race condition in the KDE Desktop Environment's KDM display manager, allow a local user to elevate privileges to root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securit...

DSA-2037-1 kdebase - privilege escalation

Bulletin has no description...

kdm privilege escalation flaw

Race condition in backend/ctrl.c in KDM in KDE Software Compilation SC 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper...

gdm security update

CentOS Errata and Security Advisory CESA-2009:1364 Updated gdm packages that fix a security issue and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNOME Display Manager GDM is a...

RedHat Security Advisory RHSA-2009:1364

The remote host is missing updates announced in advisory RHSA-2009:1364. The GNOME Display Manager GDM is a configurable re-implementation of XDM, the X Display Manager. GDM allows you to log in to your system with the X Window System running, and supports running several different X sessions on...