PT-2003-1883 · Gnome · Gdm

Publicado 2003-10-21 · Atualizado 2017-07-11 · CVE-2003-0794

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: GDM versions 2.4.1.x through 2.4.1.6 GDM versions 2.4.4.x through 2.4.4.3

Description: The issue allows attackers to cause a denial of service, specifically resource exhaustion, by sending commands and not reading the results. This is due to the lack of limitation on the number or duration of commands and the use of a blocking socket connection.

Recommendations: For GDM versions 2.4.1.x through 2.4.1.6, update to version 2.4.1.7 or later. For GDM versions 2.4.4.x through 2.4.4.3, update to version 2.4.4.4 or later.

Correção

Identificadores relacionados

CVE-2003-0794

Produtos afetados

Gdm

Referências · 6

• http://mandriva.com/security/advisories?name=MDKSA-2003:100 · Aviso do Fabricante
• http://cvs.gnome.org/bonsai/cvsblame.cgi?file=gdm2/NEWS&rev=&root=/cvs/gnome · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0794 · Nota de Segurança
• http://securityfocus.com/bid/8846 · Aviso do Fabricante
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000766 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13448 · Nota