CVE-2011-1709: High severity suse gdm vulnerability
GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.
Other sources
Henne Vogelsang discovered that, as of glib 2.28, it was possible to run the default web browser (usually Firefox) in the GDM session, as the gdm user. This resulted in uncontrolled access to the local file system and possibly other resources as the gdm user. This is because glib 2.28 has changed the way URI handlers are registered; while it used to be controlled via gconf settings, it now is controlled via x-scheme-handler/<scheme> mime types (e.g. x-scheme-handler/http).
Statement:
Not vulnerable. This issue did not affect the versions of gdm as shipped with Red Hat Enterprise Linux 4, 5, or 6.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1709?
CVE-2011-1709 is classified as a moderate severity vulnerability.
How do I fix CVE-2011-1709?
To fix CVE-2011-1709, upgrade GNOME Display Manager to version 2.32.2 or later.
What does CVE-2011-1709 allow an attacker to do?
CVE-2011-1709 allows local users to gain elevated privileges by exploiting the execution of a web browser with the uid of the gdm account.
Which versions of GNOME Display Manager are affected by CVE-2011-1709?
CVE-2011-1709 affects GNOME Display Manager versions prior to 2.32.2.
Is CVE-2011-1709 related to any specific versions of GLib?
Yes, CVE-2011-1709 is specific to GNOME Display Manager when used with GLib version 2.28.