PT-2003-1883 · Gnome · Gdm

Published 2003-10-21 · Updated 2017-07-11 · CVE-2003-0794

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: GDM versions 2.4.1.x through 2.4.1.6 GDM versions 2.4.4.x through 2.4.4.3

Description: The issue allows attackers to cause a denial of service, specifically resource exhaustion, by sending commands and not reading the results. This is due to the lack of limitation on the number or duration of commands and the use of a blocking socket connection.

Recommendations: For GDM versions 2.4.1.x through 2.4.1.6, update to version 2.4.1.7 or later. For GDM versions 2.4.4.x through 2.4.4.3, update to version 2.4.4.4 or later.

Fix

Related Identifiers

CVE-2003-0794

Affected Products

Gdm

References · 6

• http://mandriva.com/security/advisories?name=MDKSA-2003:100 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0794 · Security Note
• http://securityfocus.com/bid/8846 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000766 · Vendor Advisory
• http://cvs.gnome.org/bonsai/cvsblame.cgi?file=gdm2/NEWS&rev=&root=/cvs/gnome · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13448 · Note