CVE-2006-2452: Low severity Gnome gdm vulnerability
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2452?
CVE-2006-2452 is considered a high severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2006-2452?
To fix CVE-2006-2452, update the GNOME GDM to a version that is newer than 2.15.
What systems are affected by CVE-2006-2452?
CVE-2006-2452 affects GNOME GDM versions 2.8, 2.12, 2.14, and 2.15.
Can CVE-2006-2452 be exploited remotely?
No, CVE-2006-2452 is a local vulnerability that requires physical or local access to the system to exploit.
What are the implications of CVE-2006-2452 for system security?
The implications of CVE-2006-2452 include unauthorized access to the 'Configure Login Manager' functionality, allowing users to modify system settings without proper authentication.