CVE

Id
44971  
CVE No.
CVE-2010-2387  
Status
Candidate  
Description
vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.  
Phase
Assigned (20100621)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
490933 44971 CVE-2010-2387 CONFIRM:http://ftp.gnome.org/pub/GNOME/sources/gdm/2.20/gdm-2.20.11.changes  View
490934 44971 CVE-2010-2387 CONFIRM:https://blogs.oracle.com/sunsecurity/entry/cve_2010_2387_password_disclosure  View
490935 44971 CVE-2010-2387 CONFIRM:https://bugzilla.gnome.org/show_bug.cgi?id=571846  View
490936 44971 CVE-2010-2387 AUSCERT:ASB-2010.0184  View
490937 44971 CVE-2010-2387 URL:http://www.auscert.org.au/13123  View
490938 44971 CVE-2010-2387 OSVDB:66643  View
490939 44971 CVE-2010-2387 URL:http://www.osvdb.org/66643  View
490940 44971 CVE-2010-2387 SECUNIA:40690  View
490941 44971 CVE-2010-2387 URL:http://secunia.com/advisories/40690  View
490942 44971 CVE-2010-2387 SECUNIA:40780  View
490943 44971 CVE-2010-2387 URL:http://secunia.com/advisories/40780  View
490944 44971 CVE-2010-2387 XF:solaris-gdm-information-disclosure(60642)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36441 JVNDB-2010-002221 Oracle Database Server の Core RDBMS コンポーネントにおける脆弱性 Oracle Database Server の Core RDBMS コンポーネントには、機密性および完全性に影響のある脆弱性が存在します。 CVE-2010-2391 44971 3.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002221.html  View