PRIOn knowledge basePRION:CVE-2007-3381Command injection
The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return values from the g_strsplit function, which allows local users to cause a denial of service (persistent daemon crash) via a crafted command to the daemonโs socket, related to (1) gdm.c and (2) gdmconfig.c in daemon/, and (3) gdmconfig.c and (4) gdmflexiserver.c in gui/.
References
ftp.gnome.org/pub/GNOME/sources/gdm/2.14/gdm-2.14.13.news
ftp.gnome.org/pub/GNOME/sources/gdm/2.16/gdm-2.16.7.changes
ftp.gnome.org/pub/GNOME/sources/gdm/2.18/gdm-2.18.4.news
ftp.gnome.org/pub/GNOME/sources/gdm/2.19/gdm-2.19.5.news
secunia.com/advisories/26313
secunia.com/advisories/26368
secunia.com/advisories/26520
secunia.com/advisories/26879
secunia.com/advisories/26900
security.gentoo.org/glsa/glsa-200709-11.xml
www.mandriva.com/security/advisories?name=MDKSA-2007:169
www.redhat.com/support/errata/RHSA-2007-0777.html
www.securityfocus.com/archive/1/475451/30/5550/threaded
www.securityfocus.com/bid/25191
www.securitytracker.com/id?1018523
www.vupen.com/english/advisories/2007/2781
issues.rpath.com/browse/RPL-1599
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10887
Related
