Login Request a demo
Unscored severity · published Jun 9, 2006
CVE-2006-2452
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password…
–
CVSS
0.4%
EPSS
No
On KEV
Description
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
Gdm · Gnome
2.8; 2.12; 2.14; 2.15 · source: NVD
Affected product
GD
Gdm
Gnome
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2452
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2452
bugzilla.gnome.org
http://bugzilla.gnome.org/show_bug.cgi?id=343476
lists.suse.com
http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html
secunia.com
http://secunia.com/advisories/20532
secunia.com
http://secunia.com/advisories/20552
secunia.com
http://secunia.com/advisories/20587
secunia.com
http://secunia.com/advisories/20627
More from Gdm
–
CVE-2011-1709
GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges…
–
CVE-2011-0727
GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under…
–
CVE-2009-2697
The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to…
–
CVE-2007-3381
The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return values from…
–
CVE-2006-6105
Format string vulnerability in the host chooser window (gdmchooser) in GNOME Foundation Display Manager (gdm) allows local users to execute arbitrary code via format string…