GD
Product
Gdm
15
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Gdm to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-1709 | – | Jun 14 | GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges… Affected: 1.0; 2.0; 2.2; 2.3; 2.4; 2.5; +23 more |
| CVE-2011-0727 | – | Mar 31 | GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under… Affected: 2.0; 2.2; 2.3; 2.4; 2.5; 2.6; +21 more |
| CVE-2009-2697 | – | Sep 4 | The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to… Affected: through 2.16; 0.7; 1.0; 2.0; 2.2; 2.3; +7 more |
| CVE-2007-3381 | – | Aug 7 | The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return values from… Affected: through 2.14.12; 0.7; 1.0; 2.0; 2.2; 2.3; +33 more |
| CVE-2006-6105 | – | Dec 15 | Format string vulnerability in the host chooser window (gdmchooser) in GNOME Foundation Display Manager (gdm) allows local users to execute arbitrary code via format string… Affected: 2.14.1; 2.16; 2.16.1; 2.16.2 |
| CVE-2006-2452 | – | Jun 9 | GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password… Affected: 2.8; 2.12; 2.14; 2.15 |
| CVE-2006-1057 | – | Apr 25 | Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority… Affected: 2.14 |
| CVE-2003-0794 | – | Nov 17 | GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not limit the number or duration of commands and uses a blocking socket connection, which allows attackers to cause a… Affected: 2.2.5.4; 2.4.1; 2.4.1.1; 2.4.1.2; 2.4.1.3; 2.4.1.4; +3 more |
| CVE-2003-0793 | – | Nov 17 | GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not restrict the size of input, which allows attackers to cause a denial of service (memory consumption) Affected: 2.2.5.4; 2.4.1; 2.4.1.1; 2.4.1.2; 2.4.1.3; 2.4.1.4; +3 more |
| CVE-2003-0549 | – | Aug 27 | The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) via a short authorization key name Affected: 2.2.0; 2.4.1; 2.4.1.1; 2.4.1.2; 2.4.1.3; 2.4.1.4; +2 more |
| CVE-2003-0548 | – | Aug 27 | The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a chosen host expires, a different… Affected: 2.2.0; 2.4.1; 2.4.1.1; 2.4.1.2; 2.4.1.3; 2.4.1.4; +2 more |
| CVE-2003-0547 | – | Aug 27 | GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file Affected: 2.4.1; 2.4.1.1; 2.4.1.2; 2.4.1.3; 2.4.1.4; 2.4.1.5; +1 more |
| CVE-2000-0504 | – | Jun 19 | libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro Affected: 1.0; 1.1 |
| CVE-2000-0491 | – | May 24 | Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long… Affected: 1.0 |
| CVE-1999-0990 | – | Dec 5 | Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system Affected: 2.0_beta4 |
Showing 15