CVE-2011-0727
Fixed in a distro release EPSS <1%
GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.
Products: gnome gdm
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gdm3 | 2.30.5-9 |
| Debian 13 | gdm3 | 2.30.5-9 |
| Debian 14 | gdm3 | 2.30.5-9 |
| Debian 6.0 | gdm3 | 2.30.5-6squeeze2 |
| Red Hat Enterprise Linux 6 | gdm | 1:2.30.4-21.el6_0.1 |
| Red Hat Enterprise Linux 6 | gdm-debuginfo | 1:2.30.4-21.el6_0.1 |
| Red Hat Enterprise Linux 6 | gdm-libs | 1:2.30.4-21.el6_0.1 |
| Red Hat Enterprise Linux 6 | gdm-plugin-fingerprint | 1:2.30.4-21.el6_0.1 |
| Red Hat Enterprise Linux 6 | gdm-plugin-smartcard | 1:2.30.4-21.el6_0.1 |
| Red Hat Enterprise Linux 6 | gdm-user-switch-applet | 1:2.30.4-21.el6_0.1 |