539 matches found
Fedora Core 6 : gdm-2.16.4-1.fc6 (2006-1468)
This update brings gdm to the latest stable upstream version, which among other bug fixes and improvements contains a fix for a recently reported security issue that has ID CVE-2006-6105. This fixes a problem where a user can enter strings like '%08x' into the gdmchooser 'Add'j host button and...
Fedora Core 5 : gdm-2.14.11-1.fc5 (2006-1467)
Fix for a recently reported security issue that has ID CVE-2006-6105. This fixes a problem where a user can enter strings like '%08x' into the gdmchooser 'Add'j host button and print out memory. Note that Tenable Network Security has extracted the preceding description block directly from the...
Fedora Core 5 : gdm-2.14.8-1 (2006-692)
This update addresses a moderate security issue where the user can enter the GDM configuration GUI with a user password when the Face Browser is enabled. Refer to bugzilla.gnome.org bug 343476. This update also upgrades GDM to version 2.14.8. Note that Tenable Network Security has extracted the...
CVE-2006-6105
The CVE-2006-6105 issue affects the GNOME Display Manager (gdm), specifically the host chooser window (gdmchooser). The vulnerability arises from format string handling in a hostname used in an error dialog, allowing a local attacker to execute arbitrary code via crafted input. Reports across mul...
CVE-2006-6105
Format string vulnerability in the host chooser window gdmchooser in GNOME Foundation Display Manager gdm allows local users to execute arbitrary code via format string specifiers in a hostname, which are used in an error dialog...
Debian DSA-1040-1 : gdm - programming error
A vulnerability has been identified in gdm, a display manager for X, that could allow a local attacker to gain elevated privileges by exploiting a race condition in the handling of the .ICEauthority file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...
Mandrake Linux Security Advisory : gdm (MDKSA-2006:100)
A vulnerability in gdm could allow a user to activate the gdm setup program if the administrator configured a gdm theme that provided a user list. The user could do so by choosing the setup option from the menu, clicking the user list, then entering his own password instead of root's. The updated...
GLSA-200606-14 : GDM: Privilege escalation
The remote host is affected by the vulnerability described in GLSA-200606-14 GDM: Privilege escalation GDM allows a normal user to access the configuration manager. Impact : When the 'face browser' in GDM is enabled, a normal user can use the 'configure login manager' with his/her own password...
GDM: Privilege escalation
Background GDM is the GNOME display manager. Description GDM allows a normal user to access the configuration manager. Impact When the "face browser" in GDM is enabled, a normal user can use the "configure login manager" with his/her own password instead of the root password, and thus gain...
USN-293-1: gdm vulnerability
If the admin configured a gdm theme that provided an user list, any user could activate the gdm setup program by first choosing the setup option from the menu, clicking on the user list and entering his own instead of root's password. This allowed normal users to configure potentially dangerous...
CVE-2006-2452
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges...
Design/Logic Flaw
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges...
CVE-2006-2452
GNOME GDM 2.8, 2.12, 2.14, and 2.15 with the face browser feature enabled allow a local user to access the Configure Login Manager using their own password instead of root, potentially elevating privileges. Root cause: bypass of root-authenticated access to login-manager configuration. Affected v...
rPSA-2006-0098-1 gdm
rPath Security Advisory: 2006-0098-1 Published: 2006-06-08 Products: rPath Linux 1 Rating: Severe Exposure Level Classification: Local System User Deterministic Privilege Escalation Updated Versions: gdm=/conary.rpath.com@rpl:devel//1/2.8.0.8-0.1-1 References:...
gdm (Gnome Desktop Manager) privilege escalation
Unprivileged user can access gdm configuration if face browser feature is on...
CVE-2006-2452: Undefined Security Weakness
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges...
Ubuntu 5.04 / 5.10 : gdm vulnerabilitiy (USN-278-1)
Marcus Meissner discovered a race condition in gdm's handling of the /.ICEauthority file permissions. A local attacker could exploit this to become the owner of an arbitrary file in the system. When getting control over automatically executed scripts like cron jobs, the attacker could eventually...
Mandrake Linux Security Advisory : gdm (MDKSA-2006:083)
A race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file. Packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
USN-278-1: gdm vulnerability
Marcus Meissner discovered a race condition in gdm's handling of the /.ICEauthority file permissions. A local attacker could exploit this to become the owner of an arbitrary file in the system. When getting control over automatically executed scripts like cron jobs, the attacker could eventually...