gdm: privilege escalation [LWN.net]

Package(s):

gdm

CVE #(s):

CVE-2006-2452

Created:

June 8, 2006

Updated:

June 14, 2006

Description:

gdm has a privilege escalation vulnerability that is tied to the face browser feature. If face browser is enabled, arbitrary users can access the gdm configuration screen, a feature that is normally accessible only to root. Other user accounts, and possibly the root account can then be subverted.

Alerts:

Mandriva	MDKSA-2006:100	2006-06-13
Gentoo	200606-14	2006-06-12
Fedora	FEDORA-2006-692	2006-06-09
SuSE	SUSE-SR:2006:013	2006-06-09
Ubuntu	USN-293-1	2006-06-09
rPath	rPSA-2006-0098-1	2006-06-08

(Log in to post comments)

gdm: privilege escalation

Posted Jun 15, 2006 7:41 UTC (Thu) by mjcox@redhat.com (subscriber, #31775) [Link]

Note this issue did not affect the version of gdm as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.

gdm: privilege escalation

Posted Jun 15, 2006 19:59 UTC (Thu) by mattdm (subscriber, #18) [Link]

Thank you very much for posting here!