PT-2006-1015 · Debian+2 · Debian+2

Josh Bressers + 1 · Published 2006-04-25 · Updated 2018-10-03 · CVE-2006-1057

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Low

Base vector

AV:L/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: gdm versions prior to 2.14.1

Description: A race condition issue exists in the daemon/slave.c component of gdm, allowing local users to gain privileges through a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file. Additionally, multiple vulnerabilities in the gdm package of Debian GNU/Linux may lead to breaches of confidentiality, integrity, and availability of protected information, potentially exploitable by local attackers.

Recommendations: For gdm versions prior to 2.14.1, update to version 2.14.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the .ICEauthority file to minimize the risk of exploitation.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2015-03037

CVE-2006-1057

DSA-1040-1

RHSA-2007:0286

RHSA-2007_0286

Affected Products

Debian

Red Hat

Gdm

References · 17

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1057 · Security Note
• https://bdu.fstec.ru/vul/2015-03037 · Security Note
• http://redhat.com/support/errata/RHSA-2007-0286.html · Vendor Advisory
• http://debian.org/security/2006/dsa-1040 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:083 · Vendor Advisory
• http://vupen.com/english/advisories/2006/1465 · Vendor Advisory
• https://usn.ubuntu.com/278-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1057 · Security Note
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188303 · Note
• http://debian.org/security/dsa-1040 · Note
• https://access.redhat.com/security/cve/CVE-2006-1057 · Note
• http://cvs.gnome.org/viewcvs/gdm2/daemon/slave.c?r1=1.260&r2=1.261 · Note
• https://access.redhat.com/errata/RHSA-2007:0286 · Note
• http://securityfocus.com/bid/17635 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10092 · Note