BID:8470

Multiple XDMCP GDM Unspecified Denial Of Service Vulnerabilities

Info

Multiple XDMCP GDM Unspecified Denial Of Service Vulnerabilities

Bugtraq ID:	8470
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 21 2003 12:00AM
Updated:	Mar 19 2015 09:39AM
Credit:	This vulnerability has been disclosed in a Red Hat security advisory.
Vulnerable:	Sun Linux 5.0.7 SGI ProPack 2.3 SGI ProPack 2.2.1 RedHat Linux Advanced Work Station 2.1 RedHat gdm-2.4.1.3-5.i386.rpm + RedHat Linux 9.0 i386 RedHat gdm-2.4.0.7-13.i386.rpm + RedHat Linux 8.0 i386 RedHat gdm-2.2.3.1-22.i386.rpm + RedHat Linux 7.3 i386 RedHat gdm-2.2.3.1-20.ia64.rpm + RedHat Linux 7.2 ia64 RedHat gdm-2.2.3.1-20.i386.rpm + RedHat Linux 7.2 i386 RedHat gdm-2.0beta2-45.ppc.rpm + RedHat Linux 7.1 iseries RedHat gdm-2.0beta2-45.i386.rpm + RedHat Linux 7.1 i386 RedHat Enterprise Linux WS 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux ES 2.1 Red Hat Enterprise Linux AS 2.1 IA64 Red Hat Enterprise Linux AS 2.1 Martin K. Peterson gdm 2.4.1 0 Martin K. Peterson gdm 2.4.1 .6 + Conectiva Linux 9.0 + MandrakeSoft Corporate Server 2.1 x86_64 + MandrakeSoft Corporate Server 2.1 + Mandriva Linux Mandrake 9.1 ppc + Mandriva Linux Mandrake 9.1 + Mandriva Linux Mandrake 9.0 Martin K. Peterson gdm 2.4.1 .5 Martin K. Peterson gdm 2.4.1 .4 Martin K. Peterson gdm 2.4.1 .3 + SOTLinux SOTLinux 2003 Desktop + SOTLinux SOTLinux 2003 Server Martin K. Peterson gdm 2.4.1 .2 Martin K. Peterson gdm 2.4.1 .1 Martin K. Peterson gdm 2.2.5 .4 + Conectiva Linux 8.0 Martin K. Peterson gdm 2.2.2 .1 + Conectiva Linux 7.0 Martin K. Peterson gdm 2.2 .0 + Mandriva Linux Mandrake 8.0

Not Vulnerable:

Discussion

Multiple XDMCP GDM Unspecified Denial Of Service Vulnerabilities

XDMCP has been reported prone to several vulnerabilities that provide for the remote denial of service of the GDM daemon. The issues present themselves when XDMCP is running in conjunction with GDM.

A remote attacker may exploit this issue to crash the GDM daemon and deny service to legitimate users.

Exploit / POC

Multiple XDMCP GDM Unspecified Denial Of Service Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Multiple XDMCP GDM Unspecified Denial Of Service Vulnerabilities

Solution:
Sun have released fixes to address this vulnerability in Sun Linux 5.0.7. Users who are affected by this issue are advised to apply relevant fixes as soon as possible. Please see Sun reference (Sun Linux Support - Sun Linux Patches (Sun)) for further details regarding obtaining and applying appropriate fixes.

Mandrake has released a security advisory (MDKSA-2003:085) containing fixes to address these issues. See referenced advisory for further detail regarding applying relevant fixes.

Red Hat has released two security advisories (RHSA-2003:258-01) and (RHSA-2003-259) containing fixes to address these issues. See referenced advisories for further detail regarding obtaining and applying relevant fixes.

Conectiva has released a security advisory (CLA-2003:729) containing fixes to address these and other issues. Users are advised to upgrade as soon as possible.

SGI has released an advisory (20031002-01-U) pertaining to their ProPack Linux distribution. The advisory has been released in response to a number of RHSA advisories, and includes a patch (Patch 10027) containing updated RPM packages relating to 22 different BIDS.

Patch 10027 can be obtained via the following link:
http://support.sgi.com/

For information regarding how to obtain individual RPM packages included in Patch 10027, please see the attached advisory.

RedHat gdm-2.0beta2-45.ppc.rpm