NVD

Id
59779  
Name
CVE-2006-1057  
Description
Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-04-24  
Modified Date
2011-08-10  
Seq
2006-1057  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
307488 59779 CVE-2006-1057 http://cvs.gnome.org/viewcvs/gdm2/daemon/slave.c?r1=1.260&r2=1.261  View
307489 59779 CVE-2006-1057 oval:org.mitre.oval:def:10092  View
307490 59779 CVE-2006-1057 DSA-1040  View
307491 59779 CVE-2006-1057 MDKSA-2006:083  View
307492 59779 CVE-2006-1057 RHSA-2007:0286  View
307493 59779 CVE-2006-1057 17635  View
307494 59779 CVE-2006-1057 USN-278-1  View
307495 59779 CVE-2006-1057 ADV-2006-1465  View
307496 59779 CVE-2006-1057 gdm-slavec-symlink(26092)  View
307497 59779 CVE-2006-1057 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188303  View
307498 59779 CVE-2006-1057 FEDORA-2006-338  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58687 JVNDB-2006-000952 GNOME Display Manager の .ICEauthority ファイル処理に関する競合状態の脆弱性 GNOME Display Manager (GDM) の daemon/slave.c には、.ICEauthority ファイルにおける所有者およびパーミッションを変更する処理の際に、競合状態が発生する脆弱性が存在します。 CVE-2006-1057 17159 CVE-2006-1057 59779 3.7 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000952.html 2006-04-24 2007-05-22 View