National Cyber Awareness System

Vulnerability Summary for CVE-2011-0727

Overview

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=688323

Type: Patch Information

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=688323

External Source: MLIST

Name: [gdm-list] 20110328 GDM 2.32.1 released

Type: Patch Information

Hyperlink:http://mail.gnome.org/archives/gdm-list/2011-March/msg00020.html

External Source: XF

Name: display-manager-priv-escalation(66377)

Hyperlink:http://xforce.iss.net/xforce/xfdb/66377

External Source: VUPEN

Name: ADV-2011-0911

Hyperlink:http://www.vupen.com/english/advisories/2011/0911

External Source: VUPEN

Name: ADV-2011-0847

Hyperlink:http://www.vupen.com/english/advisories/2011/0847

External Source: VUPEN

Name: ADV-2011-0797

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0797

External Source: VUPEN

Name: ADV-2011-0787

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0787

External Source: VUPEN

Name: ADV-2011-0786

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0786

External Source: UBUNTU

Name: USN-1099-1

Hyperlink:http://www.ubuntu.com/usn/USN-1099-1

External Source: BID

Name: 47063

Hyperlink:http://www.securityfocus.com/bid/47063

External Source: REDHAT

Name: RHSA-2011:0395

Hyperlink:http://www.redhat.com/support/errata/RHSA-2011-0395.html

External Source: MANDRIVA

Name: MDVSA-2011:070

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2011:070

External Source: DEBIAN

Name: DSA-2205

Hyperlink:http://www.debian.org/security/2011/dsa-2205

External Source: SECTRACK

Name: 1025264

Hyperlink:http://securitytracker.com/id?1025264

External Source: SECUNIA

Name: 44021

Hyperlink:http://secunia.com/advisories/44021

External Source: SECUNIA

Name: 43854

Type: Advisory

Hyperlink:http://secunia.com/advisories/43854

External Source: SECUNIA

Name: 43714

Type: Advisory

Hyperlink:http://secunia.com/advisories/43714

External Source: FEDORA

Name: FEDORA-2011-4351

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057931.html

External Source: FEDORA

Name: FEDORA-2011-4335

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057333.html

External Source: CONFIRM

Name: http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.1.news

Hyperlink:http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.1.news