CVE ID:	CVE-2011-0727
Description:	GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.
Test IDs:	1.3.6.1.4.1.25623.1.0.69358   1.3.6.1.4.1.25623.1.0.69239   1.3.6.1.4.1.25623.1.0.69415   1.3.6.1.4.1.25623.1.0.69379   1.3.6.1.4.1.25623.1.0.69410   1.3.6.1.4.1.25623.1.0.69486   1.3.6.1.4.1.25623.1.0.69452
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0727 http://mail.gnome.org/archives/gdm-list/2011-March/msg00020.html Debian Security Information: DSA-2205 (Google Search) http://www.debian.org/security/2011/dsa-2205 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057333.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057931.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:070 RedHat Security Advisories: RHSA-2011:0395 http://www.redhat.com/support/errata/RHSA-2011-0395.html http://www.ubuntu.com/usn/USN-1099-1 BugTraq ID: 47063 http://www.securityfocus.com/bid/47063 http://securitytracker.com/id?1025264 http://secunia.com/advisories/43714 http://secunia.com/advisories/43854 http://secunia.com/advisories/44021 http://www.vupen.com/english/advisories/2011/0786 http://www.vupen.com/english/advisories/2011/0787 http://www.vupen.com/english/advisories/2011/0797 http://www.vupen.com/english/advisories/2011/0847 http://www.vupen.com/english/advisories/2011/0911 XForce ISS Database: display-manager-priv-escalation(66377) http://xforce.iss.net/xforce/xfdb/66377

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: