Local File Ownership Change in GNOME Display Manager 2.x by Local Users
CVE-2011-0727

Currently unrated

Key Information:

Vendor: Gnome
Status: Gdm
Vendor: CVE Published:; 31 March 2011

Summary

The GNOME Display Manager (gdm) version 2.x prior to 2.32.1 is subject to a vulnerability that allows local users to execute a symlink attack. This can lead to unauthorized changes in file ownership of arbitrary files, specifically targeting the dmrc or face icon files located in the /var/cache/gdm/ directory. An attacker exploiting this vulnerability can gain control over sensitive files, posing significant security risks within the local environment.

References

http://www.ubuntu.com/usn/USN-1099-1

vendor-advisoryx_refsource_UBUNTU

http://secunia.com/advisories/43714

third-party-advisoryx_refsource_SECUNIA

http://securitytracker.com/id?1025264

vdb-entryx_refsource_SECTRACK

Timeline

Vulnerability published
Mar 31, 2011
Vulnerability Reserved
Feb 1, 2011