CVE-2006-6698: Low severity Gnome GConf vulnerability
The GConf daemon (gconfd) in GConf 2.14.0 creates temporary files under directories with names based on the username, even when GCONFGLOBALLOCKS is not set, which allows local users to cause a denial of service by creating the directories ahead of time, which prevents other users from using Gnome.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6698?
CVE-2006-6698 has a moderate severity level as it allows local users to cause a denial of service.
How does CVE-2006-6698 affect GConf 2.14.0?
CVE-2006-6698 affects GConf 2.14.0 by allowing local users to create temporary directories, blocking access for other users.
Who is affected by the vulnerability CVE-2006-6698?
Local users on systems running GConf 2.14.0 are affected by CVE-2006-6698.
Can CVE-2006-6698 be exploited remotely?
No, CVE-2006-6698 cannot be exploited remotely as it requires local user access.
What is the workaround for CVE-2006-6698?
A possible workaround for CVE-2006-6698 is to ensure that the GCONF_GLOBAL_LOCKS is set to prevent local users from creating the necessary directories.