PT-2009-5088 · Gnome+1 · Gnome Display Manager+1

Radek Vokál · Published 2009-09-02 · Updated 2017-09-19 · CVE-2009-2697

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GNOME Display Manager (GDM) versions prior to 2.16.0-56

Description The issue is related to the Red Hat build script for GDM, which omits TCP Wrapper support. This might allow remote attackers to bypass intended access restrictions via XDMCP connections.

Recommendations For versions prior to 2.16.0-56, update to version 2.16.0-56 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2009-2697

RHSA-2009:1364

RHSA-2009_1364

Affected Products

Gnome Display Manager

Red Hat

References · 8

• http://secunia.com/advisories/36553 · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2009-1364.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2697 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9586 · Note
• http://securityfocus.com/bid/36219 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=239818 · Note
• https://access.redhat.com/security/cve/CVE-2009-2697 · Note
• https://access.redhat.com/errata/RHSA-2009:1364 · Note