Vulnerability in Gnome Gdm

CVE-2006-1057

Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.

Vulnerability class: Race Condition

EPSS: 0.003 (19.4th percentile) — read the EPSS interpretation.

Affected products

  • Gnome Gdm — versions 2.14
  • N/a — versions n/a

Weakness classification (CWE)

References