Lucene search

MitreCVE-2011-1709

HistoryJun 14, 2011 - 5:55 p.m.

CVE-2011-1709

2011-06-1417:55:03

CWE-264

mitre

web.nvd.nist.gov

cve-2011-1709

gdm

privilege escalation

mime type

local exploit

security vulnerability

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

Percentile

5.1%

JSON

GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.

Affected configurations

Nvd

Node

gnomegdmMatch1.0

gnomegdmMatch2.0

gnomegdmMatch2.2

gnomegdmMatch2.3

gnomegdmMatch2.4

gnomegdmMatch2.5

gnomegdmMatch2.6

gnomegdmMatch2.8

gnomegdmMatch2.13

gnomegdmMatch2.14

gnomegdmMatch2.15

gnomegdmMatch2.16

gnomegdmMatch2.17

gnomegdmMatch2.18

gnomegdmMatch2.19

gnomegdmMatch2.20

gnomegdmMatch2.21

gnomegdmMatch2.22

gnomegdmMatch2.23

gnomegdmMatch2.24

gnomegdmMatch2.25

gnomegdmMatch2.26

gnomegdmMatch2.27

gnomegdmMatch2.28

gnomegdmMatch2.29

gnomegdmMatch2.30

gnomegdmMatch2.31

gnomegdmMatch2.32

gnomegdmMatch2.32.1

AND

gnomeglibMatch2.28

VendorProductVersionCPE
gnomegdm1.0cpe:2.3:a:gnome:gdm:1.0:*:*:*:*:*:*:*
gnomegdm2.0cpe:2.3:a:gnome:gdm:2.0:*:*:*:*:*:*:*
gnomegdm2.2cpe:2.3:a:gnome:gdm:2.2:*:*:*:*:*:*:*
gnomegdm2.3cpe:2.3:a:gnome:gdm:2.3:*:*:*:*:*:*:*
gnomegdm2.4cpe:2.3:a:gnome:gdm:2.4:*:*:*:*:*:*:*
gnomegdm2.5cpe:2.3:a:gnome:gdm:2.5:*:*:*:*:*:*:*
gnomegdm2.6cpe:2.3:a:gnome:gdm:2.6:*:*:*:*:*:*:*
gnomegdm2.8cpe:2.3:a:gnome:gdm:2.8:*:*:*:*:*:*:*
gnomegdm2.13cpe:2.3:a:gnome:gdm:2.13:*:*:*:*:*:*:*
gnomegdm2.14cpe:2.3:a:gnome:gdm:2.14:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gnome	gdm	1.0	cpe:2.3:a:gnome:gdm:1.0:::::::*
gnome	gdm	2.0	cpe:2.3:a:gnome:gdm:2.0:::::::*
gnome	gdm	2.2	cpe:2.3:a:gnome:gdm:2.2:::::::*
gnome	gdm	2.3	cpe:2.3:a:gnome:gdm:2.3:::::::*
gnome	gdm	2.4	cpe:2.3:a:gnome:gdm:2.4:::::::*
gnome	gdm	2.5	cpe:2.3:a:gnome:gdm:2.5:::::::*
gnome	gdm	2.6	cpe:2.3:a:gnome:gdm:2.6:::::::*
gnome	gdm	2.8	cpe:2.3:a:gnome:gdm:2.8:::::::*
gnome	gdm	2.13	cpe:2.3:a:gnome:gdm:2.13:::::::*
gnome	gdm	2.14	cpe:2.3:a:gnome:gdm:2.14:::::::*