SUSE CVE-2011-1709

GNOME Display Manager gdm before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type...

openSUSE Security Update : gdm (openSUSE-SU-2011:0581-1)

This gdm update starts firefox not as user 'gdm' anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gdm-4636. The text description of this plugin is C SUSE LLC...

Fedora Update for gdm FEDORA-2011-7822

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-1709

CVE-2011-1709 affects GNOME Display Manager (gdm) before 2.32.2 when used with glib 2.28. It allows a local attacker to escalate privileges by causing gdm to launch a web browser as the gdm user via the x-scheme-handler/http MIME type. Affected component: gdm; root cause: insecure handling of URL...

Fedora 15 : gdm-3.0.4-1.fc15 (2011-7822)

This update fixes a flaw that can lead to web browser at the login screen if policykit policies are changed to be more restrictive than defaults. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

[USN-1142-1] GDM vulnerability

========================================================================== Ubuntu Security Notice USN-1142-1 June 01, 2011 gdm vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...

CVE-2011-1709

GNOME Display Manager gdm before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type...