gdm

2007-09-07

Page content

Author: voroskoi
Vulnerable: 2.18.0-1
Unaffected: 2.18.0-2terminus1

A vulnerability has been discovered in GNOME Display Manager, which can be exploited by malicious, local users to cause a DoS (Denial of Service). The vulnerability is caused due to the GDM daemon improperly handling NULL values returned by the “g_strsplit” function. This can be exploited to crash the GNOME Display Manager by sending specially crafted requests to the local GDM socket.

Bug Tracker URL: http://bugs.frugalware.org/task/2329

CVEs:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3381