Gnome
Gnome GDM: vulnerabilidades y CVE
Gnome GDM tiene 15 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE15
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2011-1709 | Alta (7.2) | 0.43% | — | 14 jun 2011 | GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the… |
| CVE-2011-0727 | Media (6.9) | 0.38% | — | 31 mar 2011 | GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/. |
| CVE-2009-2697 | Media (6.8) | 1.8% | — | 4 sept 2009 | The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via… |
| CVE-2007-3381 | Baja (1.5) | 0.33% | — | 7 ago 2007 | The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return values from the g_strsplit function, which allows… |
| CVE-2006-6105 | Media (4.3) | 0.41% | — | 15 dic 2006 | Format string vulnerability in the host chooser window (gdmchooser) in GNOME Foundation Display Manager (gdm) allows local users to execute arbitrary code via format string specifiers in a hostname, which are used in an… |
| CVE-2006-2452 | Baja (3.7) | 0.36% | — | 9 jun 2006 | GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can… |
| CVE-2006-1057 | Baja (3.7) | 0.27% | — | 25 abr 2006 | Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file. |
| CVE-2003-0794 | Baja (2.1) | 0.36% | — | 17 nov 2003 | GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not limit the number or duration of commands and uses a blocking socket connection, which allows attackers to cause a denial of service (resource exhaustion)… |
| CVE-2003-0793 | Baja (2.1) | 0.42% | — | 17 nov 2003 | GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not restrict the size of input, which allows attackers to cause a denial of service (memory consumption). |
| CVE-2003-0549 | Media (5) | 1.5% | — | 27 ago 2003 | The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) via a short authorization key name. |
| CVE-2003-0548 | Media (5) | 1.5% | — | 27 ago 2003 | The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a chosen host expires, a different issue than CVE-2003-0549. |
| CVE-2003-0547 | Baja (2.1) | 0.37% | — | 27 ago 2003 | GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file. |
| CVE-2000-0504 | Media (5) | 3.3% | — | 19 jun 2000 | libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro. |
| CVE-2000-0491 | Alta (10) | 18% | — | 24 may 2000 | Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request. |
| CVE-1999-0990 | Baja (2.1) | 0.41% | — | 5 dic 1999 | Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system. |