Red Hat Security AdvisoryRHSA-2007:0286
gdm security and bug fix update
Released 2007-05-01 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 gdm-1:2.6.0.5-7.rhel4.15, gdm-1:2.6.0.5-7.rhel4.15.i386, gdm-1:2.6.0.5-7.rhel4.15.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 gdm-1:2.6.0.5-7.rhel4.15, gdm-1:2.6.0.5-7.rhel4.15.i386
- Red Hat Enterprise Linux ES version 4 gdm-1:2.6.0.5-7.rhel4.15, gdm-1:2.6.0.5-7.rhel4.15.i386, gdm-1:2.6.0.5-7.rhel4.15.ia64
- Red Hat Enterprise Linux WS version 4 gdm-1:2.6.0.5-7.rhel4.15, gdm-1:2.6.0.5-7.rhel4.15.i386, gdm-1:2.6.0.5-7.rhel4.15.ia64
Fixes 1 record
Priority LOW 17
Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.
CVSS 2.0LOW 3.7· Local · No auth · Interaction — · EPSS 0.00278 · Published 2006-04-25 · Fixed CWE-362
