CVE-2006-2452
First published: Fri Jun 09 2006(Updated: )
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNOME gdm | =2.12 | |
| GNOME gdm | =2.15 | |
| GNOME gdm | =2.8 | |
| GNOME gdm | =2.14 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/archive/1/436428
- http://bugzilla.gnome.org/show_bug.cgi?id=343476
- http://www.securityfocus.com/bid/18332
- http://www.gentoo.org/security/en/glsa/glsa-200606-14.xml
- http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html
- http://secunia.com/advisories/20552
- http://secunia.com/advisories/20627
- http://secunia.com/advisories/20532
- http://secunia.com/advisories/20636
- http://secunia.com/advisories/20587
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:100
- http://www.vupen.com/english/advisories/2006/2239
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27018
- https://usn.ubuntu.com/293-1/
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/author
- agent/severity
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/gnome
- canonical/gnome gdm
- version/gnome gdm/2.12
- version/gnome gdm/2.15
- version/gnome gdm/2.8
- version/gnome gdm/2.14