CVE ID:	CVE-2006-2452
Description:	GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges.
Test IDs:	1.3.6.1.4.1.25623.1.0.56960   1.3.6.1.4.1.25623.1.0.56949   1.3.6.1.4.1.25623.1.0.57043   1.3.6.1.4.1.25623.1.0.59426   1.3.6.1.4.1.25623.1.0.59321   1.3.6.1.4.1.25623.1.1.12.2006.293.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2452 BugTraq ID: 18332 http://www.securityfocus.com/bid/18332 Bugtraq: 20060608 rPSA-2006-0098-1 gdm (Google Search) http://www.securityfocus.com/archive/1/436428 http://www.gentoo.org/security/en/glsa/glsa-200606-14.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:100 http://secunia.com/advisories/20532 http://secunia.com/advisories/20552 http://secunia.com/advisories/20587 http://secunia.com/advisories/20627 http://secunia.com/advisories/20636 SuSE Security Announcement: SUSE-SR:2006:013 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html https://usn.ubuntu.com/293-1/ http://www.vupen.com/english/advisories/2006/2239 XForce ISS Database: gdm-facebrowser-security-bypass(27018) https://exchange.xforce.ibmcloud.com/vulnerabilities/27018