Patchwire CVEs, their patch status, and feeds to follow them

CVE-2006-1057

Fixed in a distro release EPSS <1%

Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.

Published 2006-04-25 · CVE record · OSV

Products: gnome gdm

Distro releases

ReleasePackageFixed in
Debian 3.1gdm2.6.0.8-1sarge2
Red Hat Enterprise Linux 4gdm1:2.6.0.5-7.rhel4.15
Red Hat Enterprise Linux 4gdm-debuginfo1:2.6.0.5-7.rhel4.15