Vulnerability in Gnome Display Manager

CVE-2013-4169

GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/.

EPSS: 0.004 (29.7th percentile) — read the EPSS interpretation.

Affected products

Gnome Gnome_display_manager — versions 0.7, 1.0, 2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

References

secalert@redhat.com (x_refsource_CONFIRM, Patch)
secalert@redhat.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)