Test ID:	1.3.6.1.4.1.25623.1.0.51471
Category:	Conectiva Local Security Checks
Title:	Conectiva Security Advisory CLA-2003:766
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory CLA-2003:766. GDM[1] is the Gnome display manager used for graphical logins. Jarno Gassenbauer found two local denial of service vulnerabilites in GDM, both fixed in the versions 2.4.4.4, 2.4.1.7 and in the packages released with this advisory: - GDM does not impose a size limit to its receive buffer (which is dynamically allocated). An attacker can exploit this vulnerability by sending an arbitrary number of bytes to GDM so that the memory will be exausted and the kernel will terminate the GDM process. - GDM does not control the number nor imposes a timeout when queried for commands (like calls for version string, authentication, etc). An attacker can connect to gdm, send a command and never read the answer, thus causing gdm to fill its send buffer and stop accepting new, valid, logins. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2003-0793 and CVE-2003-0794, respectively, to these issues. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.5z.com/jirka/gdm.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0793 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0794 http://www.securityspace.com/smysecure/catid.html?in=CLA-2003:766 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002003 Risk factor : Medium CVSS Score: 2.1
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0793 BugTraq ID: 8846 http://www.securityfocus.com/bid/8846 Conectiva Linux advisory: CLA-2003:766 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000766 http://www.mandriva.com/security/advisories?name=MDKSA-2003:100 XForce ISS Database: gdm-dos(13447) https://exchange.xforce.ibmcloud.com/vulnerabilities/13447 Common Vulnerability Exposure (CVE) ID: CVE-2003-0794 XForce ISS Database: gdm-command-dos(13448) https://exchange.xforce.ibmcloud.com/vulnerabilities/13448
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.