NVD

Id
55533  
Name
CVE-2007-3381  
Description
The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return values from the g_strsplit function, which allows local users to cause a denial of service (persistent daemon crash) via a crafted command to the daemon"s socket, related to (1) gdm.c and (2) gdmconfig.c in daemon/, and (3) gdmconfig.c and (4) gdmflexiserver.c in gui/.  
Reject
 
CVSS Version
2  
CVSS Score
1.5  
Severity
Low  
CVSS Base Score
1.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
2.7  
CVSS Vector
(AV:L/AC:M/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-08-07  
Modified Date
2011-04-07  
Seq
2007-3381  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
282211 55533 CVE-2007-3381 http://ftp.gnome.org/pub/GNOME/sources/gdm/2.14/gdm-2.14.13.news  View
282212 55533 CVE-2007-3381 http://ftp.gnome.org/pub/GNOME/sources/gdm/2.16/gdm-2.16.7.changes  View
282213 55533 CVE-2007-3381 http://ftp.gnome.org/pub/GNOME/sources/gdm/2.18/gdm-2.18.4.news  View
282214 55533 CVE-2007-3381 http://ftp.gnome.org/pub/GNOME/sources/gdm/2.19/gdm-2.19.5.news  View
282215 55533 CVE-2007-3381 oval:org.mitre.oval:def:10887  View
282216 55533 CVE-2007-3381 GLSA-200709-11  View
282217 55533 CVE-2007-3381 MDKSA-2007:169  View
282218 55533 CVE-2007-3381 RHSA-2007:0777  View
282219 55533 CVE-2007-3381 20070803 FLEA-2007-0041-1 gdm  View
282220 55533 CVE-2007-3381 25191  View
282221 55533 CVE-2007-3381 1018523  View
282222 55533 CVE-2007-3381 ADV-2007-2781  View
282223 55533 CVE-2007-3381 https://issues.rpath.com/browse/RPL-1599  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51914 JVNDB-2007-000577 GNOME Display Manager (GDM) の GDM デーモンにおけるサービス運用妨害 (DoS) の脆弱性 GNOME Display Manager (GDM) の GDM デーモンには、daemon/gdm.c および daemon/gdmconfig.c、gui/gdmconfig.c、gui/gdmflexiserver.c において、g_strsplit() 関数からの NULL の戻り値の処理に不備が存在し、細工された GDM ソケットコマンドを処理する際にサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-3381 26736 CVE-2007-3381 55533 1.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000577.html 2007-08-07 2007-08-20 View