Test ID:	1.3.6.1.4.1.25623.1.0.64803
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2009:1364
Summary:	The remote host is missing updates announced in;advisory RHSA-2009:1364.;;The GNOME Display Manager (GDM) is a configurable re-implementation of XDM,;the X Display Manager. GDM allows you to log in to your system with the X;Window System running, and supports running several different X sessions on;your local machine at the same time.;;A flaw was found in the way the gdm package was built. The gdm package was;missing TCP wrappers support, which could result in an administrator;believing they had access restrictions enabled when they did not.;(CVE-2009-2697);;All users should upgrade to these updated packages, which resolve these;issues. GDM must be restarted for this update to take effect. Rebooting;achieves this, but changing the runlevel from 5 to 3 and back to 5 also;restarts GDM.
Description:	Summary: The remote host is missing updates announced in advisory RHSA-2009:1364. The GNOME Display Manager (GDM) is a configurable re-implementation of XDM, the X Display Manager. GDM allows you to log in to your system with the X Window System running, and supports running several different X sessions on your local machine at the same time. A flaw was found in the way the gdm package was built. The gdm package was missing TCP wrappers support, which could result in an administrator believing they had access restrictions enabled when they did not. (CVE-2009-2697) All users should upgrade to these updated packages, which resolve these issues. GDM must be restarted for this update to take effect. Rebooting achieves this, but changing the runlevel from 5 to 3 and back to 5 also restarts GDM. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2697 BugTraq ID: 36219 http://www.securityfocus.com/bid/36219 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9586 RedHat Security Advisories: RHSA-2009:1364 https://rhn.redhat.com/errata/RHSA-2009-1364.html http://secunia.com/advisories/36553
Copyright	Copyright (C) 2009 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.