GDM vulnerability

2011-03-3000:00:00

ubuntu.com

9.3 High

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.5%

JSON

Releases

Ubuntu 10.10
Ubuntu 10.04
Ubuntu 9.10

Packages

gdm - GNOME Display Manager

Details

Sebastian Krahmer discovered that GDM (GNOME Display Manager) did not
properly drop privileges when handling the cache directories used
to store users’ dmrc and face icon files. This could allow a local
attacker to change the ownership of arbitrary files, thereby gaining
root privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchgdm< 2.28.1-0ubuntu2.3UNKNOWN
Ubuntu10.10noarchgdm< 2.30.5-0ubuntu4.1UNKNOWN
Ubuntu10.04noarchgdm< 2.30.2.is.2.30.0-0ubuntu5.1UNKNOWN