CVE-2003-0794

GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not limit the number or duration of commands and uses a blocking socket connection, which allows attackers to cause a denial of service resource exhaustion by sending commands and not reading the results...

CVE-2003-0793

GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not restrict the size of input, which allows attackers to cause a denial of service memory consumption...

CVE-2003-0793

The CVE-2003-0793 issue affects GDM 2.4.4.x before 2.4.4.4 and 2.4.1.x before 2.4.1.7, where input size is not restricted, allowing a local attacker to cause a denial of service via memory consumption. Publicly cited references (Slackware/Mandrake/MDV) confirm local user impact (crash/freeze) and...

CVE-2003-0794

The CVE-2003-0794 issue affects GDM (GNOME Display Manager) with versions 2.4.4.x before 2.4.4.4 and 2.4.1.x before 2.4.1.7. The root cause is that GDM does not limit the number or duration of commands and uses a blocking socket, enabling a local attacker to trigger denial of service via resource...

CVE-2003-0794: Undefined Security Weakness

GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not limit the number or duration of commands and uses a blocking socket connection, which allows attackers to cause a denial of service resource exhaustion by sending commands and not reading the results...

CVE-2003-0793: Undefined Security Weakness

GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not restrict the size of input, which allows attackers to cause a denial of service memory consumption...

gdm DoS

No description provided...

[Full-Disclosure] MDKSA-2003:100 - Updated gdm packages fix local vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: gdm Advisory ID: MDKSA-2003:100 Date: October 16th, 2003 Affected versions: 9.1, 9.2, Corporate Server 2.1 Problem Description: Two vulnerabilities were discovered in gdm by Jarno Gassenbauer that...

CVE-2003-0547

GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the /.xsession-errors file...

CVE-2003-0548

The X Display Manager Control Protocol XDMCP support for GDM before 2.4.1.6 allows attackers to cause a denial of service daemon crash when a chosen host expires, a different issue than CVE-2003-0549...

GDM security update

Upgraded gdm packages are available for Slackware 9.0 and -current. These fix a security issue where a local user may use GDM to read any file on the system. Here are the details from the Slackware 9.0 ChangeLog: Sun Aug 24 14:36:29 PDT 2003 patches/packages/gdm-2.4.1.6-i386-1.tgz: Upgraded to...

CVE-2003-0547

GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the /.xsession-errors file...

CVE-2003-0548

GDM (GNOME Display Manager) vulnerable to DoS via XDMCP in versions before 2.4.1.6. The issue affects the XDMCP handling and may cause the daemon to crash when certain authorization data or host expiry conditions are encountered. Public descriptions indicate the two related CVEs (CVE-2003-0548 an...

CVE-2003-0549

CVE-2003-0549 affects the GNOME Display Manager (GDM) prior to version 2.4.1.6, where the XDMCP feature can be abused to crash the gdm daemon, causing DoS via a short authorization key name. Public records in NVD and vendor advisories describe the issue as stemming from XDMCP handling, with the r...

CVE-2003-0547

CVE-2003-0547 : GDM before 2.4.1.6 allows a local user to read arbitrary text files via a symlink attack on the ~/.xsession-errors file when using the “examine session errors” feature. Root cause: GDM runs as root during the examination, enabling file disclosure. Public advisories (e.g., Mandrake...

CVE-2003-0548

The X Display Manager Control Protocol XDMCP support for GDM before 2.4.1.6 allows attackers to cause a denial of service daemon crash when a chosen host expires, a different issue than CVE-2003-0549...

[RHSA-2003:258-01] GDM allows local user to read any file.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: GDM allows local user to read any file. Advisory ID: RHSA-2003:258-01 Issue date: 2003-08-21 Updated on: 2003-08-21 Product: Red Hat Linux...

CVE-2003-0548: Undefined Security Weakness

The X Display Manager Control Protocol XDMCP support for GDM before 2.4.1.6 allows attackers to cause a denial of service daemon crash when a chosen host expires, a different issue than CVE-2003-0549...

CVE-2003-0549: Undefined Security Weakness

The X Display Manager Control Protocol XDMCP support for GDM before 2.4.1.6 allows attackers to cause a denial of service daemon crash via a short authorization key name...

CVE-2003-0547: Undefined Security Weakness

GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the /.xsession-errors file...