Lucene search
Veracode Vulnerability DatabaseVERACODE:11239HistoryJan 15, 2019 - 8:58 a.m.
Privilege Escalation
2019-01-1508:58:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
The GNOME Display Manager (GDM) has a race condition. It is possible because it does not properly handle the X server sockets directory located in the system temporary directory, allowing an unprivileged user to trigger a symbolic link attack, giving them write access to any file, allowing them to escalate their privileges to root.
Related
nessus
nessus
CentOS 5 : gdm / initscripts (CESA-2013:1213)
2013-09-06 00:00:00
RHEL 5 : gdm (RHSA-2013:1213)
2013-09-06 00:00:00
Oracle Linux 5 : gdm (ELSA-2013-1213)
2013-09-07 00:00:00
openvas
openvas
CentOS Update for gdm CESA-2013:1213 centos5
2013-09-06 00:00:00
CentOS Update for initscripts CESA-2013:1213 centos5
2013-09-12 00:00:00
CentOS Update for initscripts CESA-2013:1213 centos5
2013-09-12 00:00:00
securityvulns
securityvulns
Gnome gdm symbolic links vulnerability
2013-10-03 00:00:00
[ MDVSA-2013:230 ] gdm
2013-10-03 00:00:00
ubuntucve
ubuntucve
CVE-2013-4169
2013-09-10 00:00:00
prion
prion
Code injection
2013-09-10 19:55:00
cvelist
cvelist
CVE-2013-4169
2022-10-03 16:14:56
centos
centos
gdm, initscripts security update
2013-09-05 21:01:58
redhat
redhat
(RHSA-2013:1213) Important: gdm security update
2013-09-05 00:00:00
oraclelinux
oraclelinux
gdm security update
2013-09-05 00:00:00
debiancve
debiancve
CVE-2013-4169
2013-09-10 19:55:00
cve
cve
CVE-2013-4169
2013-09-10 19:55:00
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
Related for VERACODE:11239