CVE

Id
17161  
CVE No.
CVE-2006-1057  
Status
Candidate  
Description
Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.  
Phase
Assigned (20060307)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
140726 17161 CVE-2006-1057 CONFIRM:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188303  View
140727 17161 CVE-2006-1057 CONFIRM:http://cvs.gnome.org/viewcvs/gdm2/daemon/slave.c?r1=1.260&r2=1.261  View
140728 17161 CVE-2006-1057 DEBIAN:DSA-1040  View
140729 17161 CVE-2006-1057 URL:http://www.debian.org/security/2006/dsa-1040  View
140730 17161 CVE-2006-1057 FEDORA:FEDORA-2006-338  View
140731 17161 CVE-2006-1057 URL:https://www.redhat.com/archives/fedora-announce-list/2006-April/msg00160.html  View
140732 17161 CVE-2006-1057 MANDRIVA:MDKSA-2006:083  View
140733 17161 CVE-2006-1057 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:083  View
140734 17161 CVE-2006-1057 REDHAT:RHSA-2007:0286  View
140735 17161 CVE-2006-1057 URL:http://www.redhat.com/support/errata/RHSA-2007-0286.html  View
140736 17161 CVE-2006-1057 UBUNTU:USN-278-1  View
140737 17161 CVE-2006-1057 URL:http://www.ubuntulinux.org/support/documentation/usn/usn-278-1  View
140738 17161 CVE-2006-1057 BID:17635  View
140739 17161 CVE-2006-1057 URL:http://www.securityfocus.com/bid/17635  View
140740 17161 CVE-2006-1057 OVAL:oval:org.mitre.oval:def:10092  View
140741 17161 CVE-2006-1057 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10092  View
140742 17161 CVE-2006-1057 VUPEN:ADV-2006-1465  View
140743 17161 CVE-2006-1057 URL:http://www.vupen.com/english/advisories/2006/1465  View
140744 17161 CVE-2006-1057 XF:gdm-slavec-symlink(26092)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57956 JVNDB-2006-000152 Samba の winbindd デーモンにおける情報漏洩の脆弱性 Samba に含まれる winbindd デーモンには、Samba が Windows ドメインに参加するためにドメインコントローラに送信する認証情報を winbind ログファイルに平文で保存してしまう脆弱性が存在します。 CVE-2006-1059 17161 1.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000152.html  View