Gdm@2.16 Security Vulnerabilities and Issues — Gdm@2.16 CVE List

Lucene search

GnomeGdm2.16

4 matches found

CVE•added 2011/03/31 10:55 p.m.•55 views

CVE-2011-0727

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

6.9CVSS8.6AI score0.00042EPSS

CVE•added 2011/06/14 5:55 p.m.•52 views

CVE-2011-1709

GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.

7.2CVSS6.3AI score0.00062EPSS

CVE•added 2006/12/15 2:28 a.m.•47 views

CVE-2006-6105

Format string vulnerability in the host chooser window (gdmchooser) in GNOME Foundation Display Manager (gdm) allows local users to execute arbitrary code via format string specifiers in a hostname, which are used in an error dialog.

4.3CVSS6.9AI score0.00073EPSS

CVE•added 2007/08/07 10:17 a.m.•41 views

CVE-2007-3381

The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return values from the g_strsplit function, which allows local users to cause a denial of service (persistent daemon crash) via a crafted ...

1.5CVSS5.8AI score0.00077EPSS