CVE-2006-1057
Fixed in a distro release EPSS <1%
Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.
Products: gnome gdm
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | gdm | 2.6.0.8-1sarge2 |
| Red Hat Enterprise Linux 4 | gdm | 1:2.6.0.5-7.rhel4.15 |
| Red Hat Enterprise Linux 4 | gdm-debuginfo | 1:2.6.0.5-7.rhel4.15 |