PT-2003-1069
CVE-2003-0547
·
تاريخ النشر
2003-08-21
·
تاريخ التحديث
2017-10-11
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
GDM versions prior to 2.4.1.6
GDM version 2.0beta2
GDM version 2.2.3.1
Description
The issue allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file when using the "examine session errors" feature. Additionally, multiple vulnerabilities in the GDM package may lead to disruption of protected information and can be exploited remotely.
Recommendations
For GDM versions prior to 2.4.1.6, update to version 2.4.1.6 or later to resolve the issue.
For GDM version 2.0beta2, consider disabling the "examine session errors" feature until a patch is available.
For GDM version 2.2.3.1, restrict access to the ~/.xsession-errors file to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾