CVE-2003-0793: Low severity gnome gdm vulnerability

Published Oct 21, 2003

Updated

GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not restrict the size of input, which allows attackers to cause a denial of service (memory consumption).

Affected Software

9 affected components

Gnome gdm=2.4.1

Gnome gdm=2.4.4

Gnome gdm=2.4.1.5

Gnome gdm=2.4.1.2

Gnome gdm=2.4.1.4

Gnome gdm=2.2.5.4

Gnome gdm=2.4.1.3

Gnome gdm=2.4.1.6

Gnome gdm=2.4.1.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade SUSE GDM to a version that resolves this vulnerability.
Fixed in 2.4.4.4
Upgrade
Upgrade SUSE GDM to a version that resolves this vulnerability.
Fixed in 2.4.1.7

Event History

Oct 21, 2003

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Nov 17, 2003

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0793?

The severity of CVE-2003-0793 is classified as moderate due to its potential to cause denial of service through memory consumption.

How do I fix CVE-2003-0793?

To mitigate CVE-2003-0793, upgrade GDM to version 2.4.4.4 or later, or 2.4.1.7 or later.

Which versions of GDM are affected by CVE-2003-0793?

Affected versions include GDM 2.4.4.x before 2.4.4.4 and GDM 2.4.1.x before 2.4.1.7.

What types of attacks are possible with CVE-2003-0793?

CVE-2003-0793 allows attackers to exploit input size limitations, leading to denial of service attacks.

Is CVE-2003-0793 a remote or local vulnerability?

CVE-2003-0793 is considered a local vulnerability as it requires access to the GDM service.