CVE-2003-0547

GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the /.xsession-errors file...

GDM security update

Upgraded gdm packages are available for Slackware 9.0 and -current. These fix a security issue where a local user may use GDM to read any file on the system. Here are the details from the Slackware 9.0 ChangeLog: Sun Aug 24 14:36:29 PDT 2003 patches/packages/gdm-2.4.1.6-i386-1.tgz: Upgraded to...

CVE-2003-0549

CVE-2003-0549 affects the GNOME Display Manager (GDM) prior to version 2.4.1.6, where the XDMCP feature can be abused to crash the gdm daemon, causing DoS via a short authorization key name. Public records in NVD and vendor advisories describe the issue as stemming from XDMCP handling, with the r...

CVE-2003-0548

GDM (GNOME Display Manager) vulnerable to DoS via XDMCP in versions before 2.4.1.6. The issue affects the XDMCP handling and may cause the daemon to crash when certain authorization data or host expiry conditions are encountered. Public descriptions indicate the two related CVEs (CVE-2003-0548 an...

CVE-2003-0548

The X Display Manager Control Protocol XDMCP support for GDM before 2.4.1.6 allows attackers to cause a denial of service daemon crash when a chosen host expires, a different issue than CVE-2003-0549...

CVE-2003-0547

GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the /.xsession-errors file...

CVE-2003-0547

CVE-2003-0547 : GDM before 2.4.1.6 allows a local user to read arbitrary text files via a symlink attack on the ~/.xsession-errors file when using the “examine session errors” feature. Root cause: GDM runs as root during the examination, enabling file disclosure. Public advisories (e.g., Mandrake...

[RHSA-2003:258-01] GDM allows local user to read any file.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: GDM allows local user to read any file. Advisory ID: RHSA-2003:258-01 Issue date: 2003-08-21 Updated on: 2003-08-21 Product: Red Hat Linux...

Low: Red Hat Security Advisory: : GDM allows local user to read any file.

Updated GDM packages are available which correct a bug allowing local users to read any text files on the system, and a denial of service issue if XDMCP is enabled. GDM is the GNOME Display Manager for X. Versions of GDM prior to 2.4.1.6 contain a bug where GDM will run as root when examining the...

Low: Red Hat Security Advisory: gdm security update

Updated GDM packages are available which correct a local crash if XDMCP is enabled. GDM is the GNOME Display Manager for X. Two bugs have been found in the X Display Manager Control Protocol XDMCP which could allow a denial of service attack DoS by crashing the gdm daemon. The Common...

Переполнение буфера в gdm (buffer overflow)

Remote root при обработке XDMCP запрещен по-умолчанию...

MDKSA-2001:070 - gdm update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: gdm Date: August 20th, 2001 Advisory ID: MDKSA-2001:070 Affected versions: 8.0 Problem Description: A buffer overrun exists in the XDMCP handling code used in gdm. By sending a properly crafted XDM...

gdmurder.txt

GDM Murder Attack by Ashtar Thanks to CyberKahn for testing and adding some stuff to this text. Exploit: Possible local root comprimise / or DoS against GDM Affected: gdm-2.0beta4-0helix6, gdm-2.0beta2-26, gdm-2.0beta2-23 Other versions are untested by us. Tested on: Linux Red Hat 6.2...

CVE-2000-0668

CVE-2000-0668 affects the Linux pam_console PAM module when a display manager (gdm or kdm) has XDMCP enabled. The vulnerability allows a user to access the system console and reboot the system, with a Medium severity (CVSS v2 base score 5.0) and a Partial availability impact. The provided sources...

CVE-2000-0491

CVE-2000-0491 describes a buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm. A crafted FORWARD_QUERY can allow a remote attacker to execute arbitrary commands or cause a denial of service. The available connected documents confirm the affected components and impact but do n...

CVE-2000-0491

Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARDQUERY request...

"gdm" remote hole

Hi, Note that I was going to wait for an official fixed release of gdm, but RedHat have released an errata update to the public, so no point hanging around SUMMARY ======= "gdm" is a replacement for "xdm", the X display manager. gdm is a part of the GNOME desktop. A buffer overflow exists in the...

gdm 1.0.x2.0.x BETA2.2.0 - XDMCP Buffer Overflow (1)

gdm 1.0.x2.0.x BETA2.2.0 - XDMCP Buffer Overflow 1 // source: https://www.securityfocus.com/bid/1233/info A buffer overrun exists in the XDMCP handling code used in 'gdm', an xdm replacement, shipped as part of the GNOME desktop. By sending a maliciously crafted XDMCP message, it is possible for ...

gdm 1.0.x2.0.x BETA2.2.0 - XDMCP Buffer Overflow (2)

gdm 1.0.x2.0.x BETA2.2.0 - XDMCP Buffer Overflow 2 // source: https://www.securityfocus.com/bid/1233/info A buffer overrun exists in the XDMCP handling code used in 'gdm', an xdm replacement, shipped as part of the GNOME desktop. By sending a maliciously crafted XDMCP message, it is possible for ...

gdm 1.0.x/2.0.x BETA/2.2.0 - XDMCP Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/1233/info A buffer overrun exists in the XDMCP handling code used in 'gdm', an xdm replacement, shipped as part of the GNOME desktop. By sending a maliciously crafted XDMCP message, it is possible for a remote attacker to execute arbitrary commands as...