PT-1999-1668 · Gnome+2 · Gnome+3

Published

1999-10-07

·

Updated

2016-10-18

·

CVE-1999-1347

CVSS v2.0

4.6

Medium

VectorAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Red Hat Linux versions 6.1 and earlier
Description: A local user with a restricted account can bypass the execution of the .xsession file by starting kde, gnome, or another level from kdm.
Recommendations: For Red Hat Linux versions 6.1 and earlier, consider restricting access to kde, gnome, or other levels from kdm to prevent bypassing the .xsession file execution.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-1999-1347

Affected Products

Red Hat
Gnome
Kde
Kdm