CVE-2006-1057 — Race Condition in GDM

CWE-362 — Race Condition9 documents6 sources
Severity
3.7LOWNVD
EPSS
0.1%
top 82.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Gnome GDM
Timeline
PublishedApr 25
Latest updateMay 1

Description

Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.

CVSS vector

AV:L/AC:H/C:P/I:P/A:PExploitability: 1.9 | Impact: 6.4

Affected Packages1 packages

▶NVDgnome/gdm2.14

Patches

Patch: www.debian.org ↗Patch: www.redhat.com ↗Patch: www.debian.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-4g9q-73fx-cqxq: Race condition in daemon/slave↗2022-05-01
▶
CVEList
CVE-2006-1057: Race condition in daemon/slave↗2006-04-25
▶

📋Vendor Advisories

2
Ubuntu
gdm vulnerability↗2006-05-04
▶
Red Hat
security flaw↗2006-04-19
▶

💬Community

4
Bugzilla
CVE-2006-1057 security flaw↗2018-08-16
▶
Bugzilla
CVE-2006-1057 GDM file permissions race condition↗2006-04-07
▶
Bugzilla
CVE-2006-1057 GDM file permissions race condition↗2006-04-07
▶
Bugzilla
CVE-2006-1057 gdm race condition/exploit↗2006-04-07
▶
CVE-2006-1057 — Race Condition in Gnome GDM | cvebase