GNOME Desktop Manager privilege escalation
Published:		31.03.2011
Source:		BUGTRAQ
SecurityVulns ID:		11544
Type:		local
Level:		5/10
Description:		root privileges are not dropped on files access.

Affected:		GNOME : gdm3 2.30
CVE:		CVE-2011-0727 (GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.)

Original document

DEBIAN, [SECURITY] [DSA 2205-1] gdm3 security update (31.03.2011)

Discuss:

Read or add your comments to this news (0 comments)