CVE-2009-2697

CVE-2009-2697 is a vulnerability in the GNOME Display Manager (gdm) where the 64-bit build omits TCP wrappers support, potentially allowing bypass of access restrictions over XDMCP. Publicized in RHSA-2010:0657 (RHEL 4/5 line) and ELSA-2009-1364 (Oracle Linux 5), with CentOS/Scientific Linux advi...

CVE-2006-1057

CVE-2006-1057 is a race-condition vulnerability in gdm (GNOME Display Manager) prior to the patched release. The flaw arises when gdm modifies the permissions on the .ICEauthority file during chown/chgrp operations, enabling a local attacker to gain privileges. Multiple advisories document the fi...

CVE-2003-0549

CVE-2003-0549 affects the GNOME Display Manager (GDM) prior to version 2.4.1.6, where the XDMCP feature can be abused to crash the gdm daemon, causing DoS via a short authorization key name. Public records in NVD and vendor advisories describe the issue as stemming from XDMCP handling, with the r...

CVE-2011-0727

CVE-2011-0727 affects GNOME Display Manager (gdm) 2.x prior to 2.32.1. A local attacker can exploit a race condition in the cache handling of dmrc and face icon files under /var/cache/gdm/ via a symlink attack to change file ownership. The vulnerability is limited to local users and can lead to o...

CVE-2003-0547

CVE-2003-0547 : GDM before 2.4.1.6 allows a local user to read arbitrary text files via a symlink attack on the ~/.xsession-errors file when using the “examine session errors” feature. Root cause: GDM runs as root during the examination, enabling file disclosure. Public advisories (e.g., Mandrake...

CVE-2007-3381

CVE-2007-3381 affects the GDM daemon in GNOME Display Manager. The flaw stems from improper handling of NULL return values from g_strsplit, allowing a local attacker to crash the daemon (denial of service) via a crafted command to the daemon socket. Affected: GDM before 2.14.13; 2.16.x before 2.1...

CVE-1999-0990

The connected PT-1999-1510 entry identifies the vulnerability as affecting gdm (GNOME Display Manager) through error messages emitted when VerboseAuth is enabled. The root cause is verbose authentication error messages that allow an attacker to identify valid users on a system from local access. ...

CVE-2003-0548

GDM (GNOME Display Manager) vulnerable to DoS via XDMCP in versions before 2.4.1.6. The issue affects the XDMCP handling and may cause the daemon to crash when certain authorization data or host expiry conditions are encountered. Public descriptions indicate the two related CVEs (CVE-2003-0548 an...

CVE-2006-6105

The CVE-2006-6105 issue affects the GNOME Display Manager (gdm), specifically the host chooser window (gdmchooser). The vulnerability arises from format string handling in a hostname used in an error dialog, allowing a local attacker to execute arbitrary code via crafted input. Reports across mul...

CVE-2011-1709

CVE-2011-1709 affects GNOME Display Manager (gdm) before 2.32.2 when used with glib 2.28. It allows a local attacker to escalate privileges by causing gdm to launch a web browser as the gdm user via the x-scheme-handler/http MIME type. Affected component: gdm; root cause: insecure handling of URL...

CVE-2000-0491

CVE-2000-0491 describes a buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm. A crafted FORWARD_QUERY can allow a remote attacker to execute arbitrary commands or cause a denial of service. The available connected documents confirm the affected components and impact but do n...

CVE-2003-0793

The CVE-2003-0793 issue affects GDM 2.4.4.x before 2.4.4.4 and 2.4.1.x before 2.4.1.7, where input size is not restricted, allowing a local attacker to cause a denial of service via memory consumption. Publicly cited references (Slackware/Mandrake/MDV) confirm local user impact (crash/freeze) and...

CVE-2006-2452

GNOME GDM 2.8, 2.12, 2.14, and 2.15 with the face browser feature enabled allow a local user to access the Configure Login Manager using their own password instead of root, potentially elevating privileges. Root cause: bypass of root-authenticated access to login-manager configuration. Affected v...

CVE-2003-0794

The CVE-2003-0794 issue affects GDM (GNOME Display Manager) with versions 2.4.4.x before 2.4.4.4 and 2.4.1.x before 2.4.1.7. The root cause is that GDM does not limit the number or duration of commands and uses a blocking socket, enabling a local attacker to trigger denial of service via resource...

CVE-2000-0504

CVE-2000-0504 affects the XFree86 suite, specifically the libICE component. The issue arises when processing an unvalidated, large value in the SKIP_STRING macro, allowing remote attackers to cause a denial of service. The available documents identify the vulnerable software as libICE in XFree86 ...