Login Request a demo
Unscored severity · published Mar 31, 2011
CVE-2011-0727
GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under…
–
CVSS
0.4%
EPSS
No
On KEV
Description
GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
Gdm · Gnome
2.0; 2.2; 2.3; 2.4; 2.5; 2.6; +21 more · source: NVD
Affected product
GD
Gdm
Gnome
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0727
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0727
ftp.gnome.org
http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.1.news
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057333.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057931.html
Patch
http://mail.gnome.org/archives/gdm-list/2011-March/msg00020.html
Vendor Advisory
http://secunia.com/advisories/43714
Vendor Advisory
http://secunia.com/advisories/43854
More from Gdm
–
CVE-2011-1709
GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges…
–
CVE-2009-2697
The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to…
–
CVE-2007-3381
The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return values from…
–
CVE-2006-6105
Format string vulnerability in the host chooser window (gdmchooser) in GNOME Foundation Display Manager (gdm) allows local users to execute arbitrary code via format string…
–
CVE-2006-2452
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password…