« Volver al listado

CVE-2003-0547

Estado: ModificadaBaja (2.1)—

GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Gnome — GDMRedhat — Kdebase

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2003-0547",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2003-08-27T04:00:00.000",
  "references": [
    {
      "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000729",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://mail.gnome.org/archives/gnome-hackers/2003-August/msg00045.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=106194792924122&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2003-258.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A112",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000729",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://mail.gnome.org/archives/gnome-hackers/2003-August/msg00045.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=106194792924122&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2003-258.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A112",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "GDM before 2.4.1.6, when using the \"examine session errors\" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file."
    },
    {
      "lang": "es",
      "value": "GDM anteriores a 2.4.1.6, cuando usa la característica \"examinar errores de sesión\", permite a usuarios locales leer ficheros arbitrario mediante un ataque de enlaces simbólicos en el fichero ~/.xsession-errors"
    }
  ],
  "lastModified": "2026-06-16T22:02:24.840",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gnome:gdm:2.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C96A777E-0CA3-404C-9EF9-AF5D276FB9F4"
            },
            {
              "criteria": "cpe:2.3:a:gnome:gdm:2.4.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "44A4CEA3-1EFD-4926-8702-D9019449BF6D"
            },
            {
              "criteria": "cpe:2.3:a:gnome:gdm:2.4.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9DF81497-99A3-49B9-9CEF-C94AA4FCC2A5"
            },
            {
              "criteria": "cpe:2.3:a:gnome:gdm:2.4.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B386DD54-80C4-44C1-9276-C875D0EEE8BE"
            },
            {
              "criteria": "cpe:2.3:a:gnome:gdm:2.4.1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8A905FFC-0DBA-4636-BDE7-77F21E0871AF"
            },
            {
              "criteria": "cpe:2.3:a:gnome:gdm:2.4.1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DAA26805-862B-466F-AAE5-C8EF60312BFF"
            },
            {
              "criteria": "cpe:2.3:a:gnome:gdm:2.4.1.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B7DE2E4-5FCC-4F63-BB9F-F7EC77728F87"
            },
            {
              "criteria": "cpe:2.3:a:redhat:kdebase:2.4.0.7.13:*:i386:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8CDE0CDC-78C2-4AD8-8AD0-2A7293E6F8F2"
            },
            {
              "criteria": "cpe:2.3:a:redhat:kdebase:2.4.1.3.5:*:i386:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E24847A-9164-4CDC-AD9C-087D7C03B24A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}