CVE-2006-2452
First published: Fri Jun 09 2006(Updated: )
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SUSE GDM | =2.12 | |
| SUSE GDM | =2.15 | |
| SUSE GDM | =2.8 | |
| SUSE GDM | =2.14 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/archive/1/436428
- http://bugzilla.gnome.org/show_bug.cgi?id=343476
- http://www.securityfocus.com/bid/18332
- http://www.gentoo.org/security/en/glsa/glsa-200606-14.xml
- http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html
- http://secunia.com/advisories/20552
- http://secunia.com/advisories/20627
- http://secunia.com/advisories/20532
- http://secunia.com/advisories/20636
- http://secunia.com/advisories/20587
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:100
- http://www.vupen.com/english/advisories/2006/2239
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27018
- https://usn.ubuntu.com/293-1/
Frequently Asked Questions
What is the severity of CVE-2006-2452?
CVE-2006-2452 is considered a high severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2006-2452?
To fix CVE-2006-2452, update the GNOME GDM to a version that is newer than 2.15.
What systems are affected by CVE-2006-2452?
CVE-2006-2452 affects GNOME GDM versions 2.8, 2.12, 2.14, and 2.15.
Can CVE-2006-2452 be exploited remotely?
No, CVE-2006-2452 is a local vulnerability that requires physical or local access to the system to exploit.
What are the implications of CVE-2006-2452 for system security?
The implications of CVE-2006-2452 include unauthorized access to the 'Configure Login Manager' functionality, allowing users to modify system settings without proper authentication.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/gnome
- canonical/suse gdm
- version/suse gdm/2.12
- version/suse gdm/2.15
- version/suse gdm/2.8
- version/suse gdm/2.14