CVE-2013-4169: Improper Link Resolution Before File Access

GNOME Display Manager gdm before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/...

Oracle Linux 5 : gdm (ELSA-2013-1213)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1213 advisory. - Don't try to pre-create directories that are internal implementation details of X. Resolves: 997619 CVE-2013-4169 initscripts - create /tmp/.X11-unix in...

RHEL 5 : gdm (RHSA-2013:1213)

Updated gdm and initscripts packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Scientific Linux Security Update : gdm on SL5.x i386/srpm/x86_64 (20130905)

A race condition was found in the way GDM handled the X server sockets directory located in the system temporary directory. An unprivileged user could use this flaw to perform a symbolic link attack, giving them write access to any file, allowing them to escalate their privileges to root...

CentOS Update for gdm CESA-2013:1213 centos5

Check for the Version of gdm OpenVAS Vulnerability Test CentOS Update for gdm CESA-2013:1213 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

RedHat Update for gdm RHSA-2013:1213-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for gdm CESA-2013:1213 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 5 : gdm / initscripts (CESA-2013:1213)

Updated gdm and initscripts packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: gdm security update

Updated gdm and initscripts packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

PT-2013-1177

Name of the Vulnerable Software and Affected Versions gdm versions prior to 2.21.1 gdm-docs versions 2.16.0 gdm-debuginfo versions 2.16.0 initscripts versions 8.45.42 initscripts-debuginfo versions 8.45.42 Description The issue allows local users to change permissions of arbitrary directories via...

Oracle Linux 4 : gdm (ELSA-2010-0657)

From Red Hat Security Advisory 2010:0657 : An updated gdm package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base scor...

Oracle Linux 4 : gdm (ELSA-2007-0286)

From Red Hat Security Advisory 2007:0286 : An updated gdm package that fixes a security issue and a bug is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Gdm the GNOME Display Manager is a highly configurable reimplementation of xdm,...

Oracle Linux 6 : gdm (ELSA-2011-0395)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0395 advisory. 2.30.4-21.0.2.el60.1 - Added oracle-enterprise.patch to show oracle-release contents. 2.30.4-21.1 - Fix CVE-2011-0727 Tenable has extracted the preceding...

Oracle Linux 5 : Moderate: / gdm (ELSA-2007-0777)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2007-0777 advisory. 2.16.0-31.0.1 - CVE-2007-3381 Resolves: 247659 2.16.0-31 - change 200d character to 200c character in ml.po Tenable has extracted the preceding description bloc...

Fedora 19 : gdm-3.8.1.1-3.fc19 (2013-8462)

This updates GDM to use more security conscious build flags. This updates improves the logo on the login screen. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it ...

[SECURITY] Fedora 19 Update: gdm-3.8.1.1-3.fc19

GDM provides the graphical login screen, shown shortly after boot up, log out, and when user-switching...

gtk2 security update

CentOS Errata and Security Advisory CESA-2013:0135 Updated gtk2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVS...

CVE-2010-2387

CVE-2010-2387 affects GNOME Display Manager (gdm) 2.20.x up to, but not including, 2.20.11. When GDM debug is enabled, ve-misc.c logs user passwords contained in invalid UTF-8 sequences to syslog, potentially allowing local users to read sensitive credentials from logs and gain privileges. The is...

PT-2012-1300

Name of the Vulnerable Software and Affected Versions GNOME Display Manager versions 2.20.x through 2.20.10 Description The issue allows local users to potentially gain privileges by reading information from syslog logs when GDM debug is enabled and the user password contains invalid UTF8 encoded...

CVE-2010-2387: Undefined Security Weakness

vicious-extensions/ve-misc.c in GNOME Display Manager gdm 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs...