Vulnerability in Gnome Display Manager
CVE-2010-2387
vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.
EPSS: 0.005 (41.4th percentile) — read the EPSS interpretation.
Affected products
- Gnome Gnome_display_manager — versions 2.20.0, 2.20.1, 2.20.2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert_us@oracle.com (x_refsource_CONFIRM)
- secalert_us@oracle.com (x_refsource_AUSCERT, US Government Resource, third-party-advisory)
- secalert_us@oracle.com (x_refsource_CONFIRM)
- secalert_us@oracle.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert_us@oracle.com (x_refsource_CONFIRM)
- secalert_us@oracle.com (vdb-entry, x_refsource_XF)
- secalert_us@oracle.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert_us@oracle.com (x_refsource_OSVDB, vdb-entry)
Frequently asked questions
- What is CVE-2010-2387?
- CVE-2010-2387 is a vulnerability in Gnome Display Manager, classified under CWE-255. Published 2012-12-21.
- Is CVE-2010-2387 known to be exploited?
- 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.