6.9 - CVE-2011-0727

Executive Summary

Informations
Name	CVE-2011-0727	First vendor Publication	2011-03-31
Vendor	Cve	Last vendor Modification	2017-08-17

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	6.9	Attack Range	Local
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	3.4	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0727

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-59	Improper Link Resolution Before File Access ('Link Following')

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:12826

Oval ID:	oval:org.mitre.oval:def:12826
Title:	DSA-2205-1 gdm3 -- privilege escalation
Description:	Sebastian Krahmer discovered that the gdm3, the GNOME Desktop Manager, does not properly drop privileges when manipulating files related to the logged-in user. As a result, local users can gain root privileges. The oldstable distribution does not contain a gdm3 package. The gdm package is not affected by this issue.
Family:	unix	Class:	patch
Reference(s):	DSA-2205-1 CVE-2011-0727	Version:	5
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	gdm3
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND gdm3 DPKG is earlier than 2.30.5-6squeeze2

Definition Id: oval:org.mitre.oval:def:13786

Oval ID:	oval:org.mitre.oval:def:13786
Title:	USN-1099-1 -- gdm vulnerability
Description:	Sebastian Krahmer discovered that GDM did not properly drop privileges when handling the cache directories used to store users" dmrc and face icon files. This could allow a local attacker to change the ownership of arbitrary files, thereby gaining root privileges.
Family:	unix	Class:	patch
Reference(s):	USN-1099-1 CVE-2011-0727	Version:	5
Platform(s):	Ubuntu 10.10 Ubuntu 9.10 Ubuntu 10.04	Product(s):	gdm
Definition Synopsis:
Release section Ubuntu 10.10 is installed AND Supported architectures section Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is amd64 AND Installed architecture is powerpc AND gdm DPKG is earlier than 2.30.5-0ubuntu4.1 OR Release section Ubuntu 9.10 is installed AND Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is armel AND Installed architecture is lpia AND gdm DPKG is earlier than 2.28.1-0ubuntu2.3 OR Release section Ubuntu 10.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is amd64 AND Installed architecture is powerpc AND gdm DPKG is earlier than 2.30.2.is.2.30.0-0ubuntu5.1

Definition Id: oval:org.mitre.oval:def:21930

Oval ID:	oval:org.mitre.oval:def:21930
Title:	RHSA-2011:0395: gdm security update (Moderate)
Description:	GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0395-01 CVE-2011-0727	Version:	4
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	gdm
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section gdm-user-switch-applet is earlier than 1:2.30.4-21.el6_0.1 AND gdm-plugin-smartcard is earlier than 1:2.30.4-21.el6_0.1 AND gdm is earlier than 1:2.30.4-21.el6_0.1 AND gdm-plugin-fingerprint is earlier than 1:2.30.4-21.el6_0.1 AND gdm-libs is earlier than 1:2.30.4-21.el6_0.1

Definition Id: oval:org.mitre.oval:def:23685

Oval ID:	oval:org.mitre.oval:def:23685
Title:	ELSA-2011:0395: gdm security update (Moderate)
Description:	GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0395-01 CVE-2011-0727	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	gdm
Definition Synopsis:
Oracle Linux 6.x rpm test gdm-user-switch-applet is earlier than 1:2.30.4-21.el6_0.1 AND gdm-plugin-smartcard is earlier than 1:2.30.4-21.el6_0.1 AND gdm is earlier than 1:2.30.4-21.el6_0.1 AND gdm-plugin-fingerprint is earlier than 1:2.30.4-21.el6_0.1 AND gdm-libs is earlier than 1:2.30.4-21.el6_0.1

Definition Id: oval:org.mitre.oval:def:27397

Oval ID:	oval:org.mitre.oval:def:27397
Title:	DEPRECATED: ELSA-2011-0395 -- gdm security update (moderate)
Description:	[2.30.4-21.0.2.el6_0.1] - Added oracle-enterprise.patch to show oracle-release contents. [2.30.4-21.1] - Fix CVE-2011-0727
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-0395 CVE-2011-0727	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	gdm
Definition Synopsis:
Oracle Linux 6.x Packages match section gdm is earlier than 0:2.30.4-21.0.2.el6_0.1 AND gdm-libs is earlier than 0:2.30.4-21.0.2.el6_0.1 AND gdm-plugin-fingerprint is earlier than 0:2.30.4-21.0.2.el6_0.1 AND gdm-plugin-smartcard is earlier than 0:2.30.4-21.0.2.el6_0.1 AND gdm-user-switch-applet is earlier than 0:2.30.4-21.0.2.el6_0.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Gnome Gdm cpe:2.3:a:gnome:gdm:2.8:::::::* cpe:2.3:a:gnome:gdm:2.6:::::::* cpe:2.3:a:gnome:gdm:2.5:::::::* cpe:2.3:a:gnome:gdm:2.4:::::::* cpe:2.3:a:gnome:gdm:2.32:::::::* cpe:2.3:a:gnome:gdm:2.31:::::::* cpe:2.3:a:gnome:gdm:2.30:::::::* cpe:2.3:a:gnome:gdm:2.3:::::::* cpe:2.3:a:gnome:gdm:2.29:::::::* cpe:2.3:a:gnome:gdm:2.28:::::::* cpe:2.3:a:gnome:gdm:2.27:::::::* cpe:2.3:a:gnome:gdm:2.26:::::::* cpe:2.3:a:gnome:gdm:2.25:::::::* cpe:2.3:a:gnome:gdm:2.24:::::::* cpe:2.3:a:gnome:gdm:2.23:::::::* cpe:2.3:a:gnome:gdm:2.22:::::::* cpe:2.3:a:gnome:gdm:2.21:::::::* cpe:2.3:a:gnome:gdm:2.20:::::::* cpe:2.3:a:gnome:gdm:2.2:::::::* cpe:2.3:a:gnome:gdm:2.19:::::::* cpe:2.3:a:gnome:gdm:2.18:::::::* cpe:2.3:a:gnome:gdm:2.17:::::::* cpe:2.3:a:gnome:gdm:2.16:::::::* cpe:2.3:a:gnome:gdm:2.15:::::::* cpe:2.3:a:gnome:gdm:2.14:::::::* cpe:2.3:a:gnome:gdm:2.13:::::::* cpe:2.3:a:gnome:gdm:2.0:::::::*	27

OpenVAS Exploits

Date	Description
2012-06-06	Name : RedHat Update for gdm RHSA-2011:0395-01 File : nvt/gb_RHSA-2011_0395-01_gdm.nasl
2011-05-12	Name : Debian Security Advisory DSA 2205-1 (gdm3) File : nvt/deb_2205_1.nasl
2011-05-12	Name : FreeBSD Ports: gdm File : nvt/freebsd_gdm.nasl
2011-04-19	Name : Fedora Update for gdm FEDORA-2011-4351 File : nvt/gb_fedora_2011_4351_gdm_fc13.nasl
2011-04-11	Name : Mandriva Update for gdm MDVSA-2011:070 (gdm) File : nvt/gb_mandriva_MDVSA_2011_070.nasl
2011-04-06	Name : Fedora Update for gdm FEDORA-2011-4335 File : nvt/gb_fedora_2011_4335_gdm_fc14.nasl
2011-04-01	Name : Ubuntu Update for gdm vulnerability USN-1099-1 File : nvt/gb_ubuntu_USN_1099_1.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
72551	GNOME Display Manager (gdm) /var/cache/gdm/ Multiple File Symlink Local Privi...

Nessus® Vulnerability Scanner

Date	Description
2014-12-15	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201412-09.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_gdm-110330.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_gdm-110330.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0395.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110329_gdm_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2011-04-15	Name : The remote Fedora host is missing a security update. File : fedora_2011-4351.nasl - Type : ACT_GATHER_INFO
2011-04-11	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-070.nasl - Type : ACT_GATHER_INFO
2011-04-04	Name : The remote Fedora host is missing a security update. File : fedora_2011-4335.nasl - Type : ACT_GATHER_INFO
2011-03-31	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1099-1.nasl - Type : ACT_GATHER_INFO
2011-03-30	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_c6fbd44759ed11e08d040015f2db7bde.nasl - Type : ACT_GATHER_INFO
2011-03-29	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2205.nasl - Type : ACT_GATHER_INFO
2011-03-29	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0395.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/47063
CONFIRM	http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.1.news https://bugzilla.redhat.com/show_bug.cgi?id=688323
DEBIAN	http://www.debian.org/security/2011/dsa-2205
FEDORA	http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057333.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057931.html
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2011:070
MLIST	http://mail.gnome.org/archives/gdm-list/2011-March/msg00020.html
REDHAT	http://www.redhat.com/support/errata/RHSA-2011-0395.html
SECTRACK	http://securitytracker.com/id?1025264
SECUNIA	http://secunia.com/advisories/43714 http://secunia.com/advisories/43854 http://secunia.com/advisories/44021
UBUNTU	http://www.ubuntu.com/usn/USN-1099-1
VUPEN	http://www.vupen.com/english/advisories/2011/0786 http://www.vupen.com/english/advisories/2011/0787 http://www.vupen.com/english/advisories/2011/0797 http://www.vupen.com/english/advisories/2011/0847 http://www.vupen.com/english/advisories/2011/0911
XF	https://exchange.xforce.ibmcloud.com/vulnerabilities/66377

Alert History

If you want to see full details history, please login or register.

Date	Informations
2021-05-04 12:14:00	Multiple Updates
2021-04-22 01:15:11	Multiple Updates
2020-05-23 00:27:48	Multiple Updates
2017-08-17 09:23:18	Multiple Updates
2016-04-26 20:33:05	Multiple Updates
2014-12-16 13:24:47	Multiple Updates
2014-06-14 13:30:20	Multiple Updates
2014-02-17 11:00:31	Multiple Updates
2013-05-10 22:54:40	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	5
CPE ID(s)	27
Sources(s)	20
osvdb(s)	1
Openvas Exploit(s)	7
Nessus® Exploit(s)	12

	Related
10	GLSA-201412-09
6.9	USN-1099-1
6.9	RHSA-2011:0395
6.9	MDVSA-2011:070
6.9	DSA-2205
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 5 more Alert(s)

6.9 - CVE-2011-0727

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Nessus® Vulnerability Scanner

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU