539 matches found
Low: Red Hat Security Advisory: : GDM allows local user to read any file.
Updated GDM packages are available which correct a bug allowing local users to read any text files on the system, and a denial of service issue if XDMCP is enabled. GDM is the GNOME Display Manager for X. Versions of GDM prior to 2.4.1.6 contain a bug where GDM will run as root when examining the...
Low: Red Hat Security Advisory: gdm security update
Updated GDM packages are available which correct a local crash if XDMCP is enabled. GDM is the GNOME Display Manager for X. Two bugs have been found in the X Display Manager Control Protocol XDMCP which could allow a denial of service attack DoS by crashing the gdm daemon. The Common...
Переполнение буфера в gdm (buffer overflow)
Remote root при обработке XDMCP запрещен по-умолчанию...
MDKSA-2001:070 - gdm update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: gdm Date: August 20th, 2001 Advisory ID: MDKSA-2001:070 Affected versions: 8.0 Problem Description: A buffer overrun exists in the XDMCP handling code used in gdm. By sending a properly crafted XDM...
gdmurder.txt
GDM Murder Attack by Ashtar Thanks to CyberKahn for testing and adding some stuff to this text. Exploit: Possible local root comprimise / or DoS against GDM Affected: gdm-2.0beta4-0helix6, gdm-2.0beta2-26, gdm-2.0beta2-23 Other versions are untested by us. Tested on: Linux Red Hat 6.2...
CVE-2000-0668
CVE-2000-0668 affects the Linux pam_console PAM module when a display manager (gdm or kdm) has XDMCP enabled. The vulnerability allows a user to access the system console and reboot the system, with a Medium severity (CVSS v2 base score 5.0) and a Partial availability impact. The provided sources...
CVE-2000-0668: Undefined Security Weakness
pamconsole PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled...
CVE-2000-0491
CVE-2000-0491 describes a buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm. A crafted FORWARD_QUERY can allow a remote attacker to execute arbitrary commands or cause a denial of service. The available connected documents confirm the affected components and impact but do n...
CVE-2000-0491: Undefined Security Weakness
Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARDQUERY request...
CVE-2000-0491
Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARDQUERY request...
"gdm" remote hole
Hi, Note that I was going to wait for an official fixed release of gdm, but RedHat have released an errata update to the public, so no point hanging around SUMMARY ======= "gdm" is a replacement for "xdm", the X display manager. gdm is a part of the GNOME desktop. A buffer overflow exists in the...
gdm 1.0.x2.0.x BETA2.2.0 - XDMCP Buffer Overflow (1)
gdm 1.0.x2.0.x BETA2.2.0 - XDMCP Buffer Overflow 1 // source: https://www.securityfocus.com/bid/1233/info A buffer overrun exists in the XDMCP handling code used in 'gdm', an xdm replacement, shipped as part of the GNOME desktop. By sending a maliciously crafted XDMCP message, it is possible for ...
gdm 1.0.x2.0.x BETA2.2.0 - XDMCP Buffer Overflow (2)
gdm 1.0.x2.0.x BETA2.2.0 - XDMCP Buffer Overflow 2 // source: https://www.securityfocus.com/bid/1233/info A buffer overrun exists in the XDMCP handling code used in 'gdm', an xdm replacement, shipped as part of the GNOME desktop. By sending a maliciously crafted XDMCP message, it is possible for ...
gdm 1.0.x/2.0.x BETA/2.2.0 - XDMCP Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/1233/info A buffer overrun exists in the XDMCP handling code used in 'gdm', an xdm replacement, shipped as part of the GNOME desktop. By sending a maliciously crafted XDMCP message, it is possible for a remote attacker to execute arbitrary commands as...
gdm 1.0.x/2.0.x BETA/2.2.0 - XDMCP Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/1233/info A buffer overrun exists in the XDMCP handling code used in 'gdm', an xdm replacement, shipped as part of the GNOME desktop. By sending a maliciously crafted XDMCP message, it is possible for a remote attacker to execute arbitrary commands as...
CVE-1999-0990
The connected PT-1999-1510 entry identifies the vulnerability as affecting gdm (GNOME Display Manager) through error messages emitted when VerboseAuth is enabled. The root cause is verbose authentication error messages that allow an attacker to identify valid users on a system from local access. ...
CVE-1999-0990
Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system...