« Volver al listado

CVE-2006-2452

Estado: ModificadaBaja (3.7)—

GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Gnome — GDM

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-2452",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.7,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "HIGH",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 1.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-06-09T10:02:00.000",
  "references": [
    {
      "url": "http://bugzilla.gnome.org/show_bug.cgi?id=343476",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/20532",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/20552",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/20587",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/20627",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/20636",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200606-14.xml",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:100",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/436428",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/18332",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/2239",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27018",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://usn.ubuntu.com/293-1/",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://bugzilla.gnome.org/show_bug.cgi?id=343476",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/20532",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/20552",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/20587",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/20627",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/20636",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200606-14.xml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:100",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/436428",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/18332",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/2239",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27018",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://usn.ubuntu.com/293-1/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the \"face browser\" feature is enabled, allows local users to access the \"Configure Login Manager\" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges."
    }
  ],
  "lastModified": "2026-06-16T22:25:02.743",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gnome:gdm:2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7756E66E-2296-4B20-ABC0-B1A2ACF2657B"
            },
            {
              "criteria": "cpe:2.3:a:gnome:gdm:2.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B935ABD7-CCDF-4A23-8899-4243D66E9486"
            },
            {
              "criteria": "cpe:2.3:a:gnome:gdm:2.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "70640B9F-4EAA-4513-80E4-9DD4A862F27D"
            },
            {
              "criteria": "cpe:2.3:a:gnome:gdm:2.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27A6CC80-BC52-4B39-9424-E96DDA03666E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}