diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index b2dcb9b45a64..ac1ac44d446b 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,38 @@ Note: Please add new entries to the beginning of this file. --> + + gdm -- privilege escalation vulnerability + + + gdm + 2.30.5_2 + + + + +

Sebastian Krahmer reports:

+
+

It was discovered that the GNOME Display Manager (gdm) cleared the cache + directory, which is owned by an unprivileged user, with the privileges of the + root user. A race condition exists in gdm where a local user could take + advantage of this by writing to the cache directory between ending the session + and the signal to clean up the session, which could lead to the execution of + arbitrary code as the root user. +

+ + + + CVE-2011-0727 + http://mail.gnome.org/archives/distributor-list/2011-March/msg00008.html + https://bugzilla.redhat.com/show_bug.cgi?id=688323 + + + 2011-03-28 + 2011-03-29 + + + php -- ZipArchive segfault with FL_UNCHANGED on empty archive