First published: Tue Sep 10 2013(Updated: )
GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
GNOME Display Manager | <=2.21 | |
GNOME Display Manager | =0.7 | |
GNOME Display Manager | =1.0 | |
GNOME Display Manager | =2.0 | |
GNOME Display Manager | =2.2 | |
GNOME Display Manager | =2.13 | |
GNOME Display Manager | =2.14 | |
GNOME Display Manager | =2.14.1 | |
GNOME Display Manager | =2.14.2 | |
GNOME Display Manager | =2.14.3 | |
GNOME Display Manager | =2.14.4 | |
GNOME Display Manager | =2.14.5 | |
GNOME Display Manager | =2.14.6 | |
GNOME Display Manager | =2.14.7 | |
GNOME Display Manager | =2.14.8 | |
GNOME Display Manager | =2.14.9 | |
GNOME Display Manager | =2.14.10 | |
GNOME Display Manager | =2.14.11 | |
GNOME Display Manager | =2.14.12 | |
GNOME Display Manager | =2.15 | |
GNOME Display Manager | =2.16 | |
GNOME Display Manager | =2.16.1 | |
GNOME Display Manager | =2.16.2 | |
GNOME Display Manager | =2.17 | |
GNOME Display Manager | =2.18 | |
GNOME Display Manager | =2.18.1 | |
GNOME Display Manager | =2.18.2 | |
GNOME Display Manager | =2.18.3 | |
GNOME Display Manager | =2.19 | |
GNOME Display Manager | =2.19.1 | |
GNOME Display Manager | =2.19.2 | |
GNOME Display Manager | =2.19.3 | |
GNOME Display Manager | =2.19.4 | |
GNOME Display Manager | =2.20.0 | |
GNOME Display Manager | =2.20.1 | |
GNOME Display Manager | =2.20.2 | |
GNOME Display Manager | =2.20.3 | |
GNOME Display Manager | =2.20.4 | |
GNOME Display Manager | =2.20.5 | |
GNOME Display Manager | =2.20.6 | |
GNOME Display Manager | =2.20.7 | |
GNOME Display Manager | =2.20.8 | |
GNOME Display Manager | =2.20.9 | |
GNOME Display Manager | =2.20.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-4169 has been classified as a medium severity vulnerability.
To fix CVE-2013-4169, upgrade to GNOME Display Manager version 2.21.1 or later.
CVE-2013-4169 affects local users of GNOME Display Manager versions prior to 2.21.1.
CVE-2013-4169 involves a symlink attack that allows local users to change permissions of arbitrary directories.
CVE-2013-4169 impacts various versions of GNOME Display Manager up to 2.21.