GNOME Display Manager 'PostLogin' script Security Bypass Weakness
BID:46513
Info
GNOME Display Manager 'PostLogin' script Security Bypass Weakness
| Bugtraq ID: | 46513 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 23 2011 12:00AM |
| Updated: | Feb 23 2011 12:00AM |
| Credit: | ericlesoll |
| Vulnerable: |
GNOME GDM 2.20.11 GNOME GDM 2.20.10 GNOME GDM 2.19.5 GNOME GDM 2.19.4 GNOME GDM 2.19.3 GNOME GDM 2.19.2 GNOME GDM 2.19.1 GNOME GDM 2.18.4 GNOME GDM 2.18.3 GNOME GDM 2.18.2 GNOME GDM 2.18.1 GNOME GDM 2.17.4 GNOME GDM 2.16.7 GNOME GDM 2.16.6 GNOME GDM 2.16.5 GNOME GDM 2.16.4 GNOME GDM 2.16.3 GNOME GDM 2.16.2 GNOME GDM 2.16.1 GNOME GDM 2.16 GNOME GDM 2.14.13 GNOME GDM 2.14.12 GNOME GDM 2.14.11 GNOME GDM 2.14.1 GNOME GDM 2.8.0.5 GNOME GDM 2.8.0.4 GNOME GDM 2.8 GNOME GDM 2.6.0.8 GNOME GDM 2.6.0.7 GNOME GDM 2.29.0 GNOME GDM 2.28.0 GNOME GDM 2.12 |
| Not Vulnerable: |
GNOME GDM 2.30.0 |
Discussion
GNOME Display Manager 'PostLogin' script Security Bypass Weakness
GNOME Display Manager is prone to a security-bypass weakness related to the 'PostLogin' script.
Attackers can exploit this issue to bypass security relying on the functionality of the 'PostLogin' script.
GNOME Display Manager is prone to a security-bypass weakness related to the 'PostLogin' script.
Attackers can exploit this issue to bypass security relying on the functionality of the 'PostLogin' script.
Exploit / POC
GNOME Display Manager 'PostLogin' script Security Bypass Weakness
An attacker may exploit this issue using readily available commands.
An attacker may exploit this issue using readily available commands.
Solution / Fix
GNOME Display Manager 'PostLogin' script Security Bypass Weakness
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
GNOME Display Manager 'PostLogin' script Security Bypass Weakness
References:
References: