CVE-2007-5079
published 2007-09-25CVE-2007-5079: Red Hat Enterprise Linux 4 does not properly compile and link gdm with tcp_wrappers on x86_64 platforms, which might allow remote attackers to bypass intended…
PriorityP430medium6CVSS 2.0
AVNACMAuSCPIPAP
EPSS
1.74%
75.4th percentile
Red Hat Enterprise Linux 4 does not properly compile and link gdm with tcp_wrappers on x86_64 platforms, which might allow remote attackers to bypass intended access restrictions.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnome | gdm | <= 2.16 | — |
| gnome | gdm | — | — |
| gnome | gdm | — | — |
| gnome | gdm | — | — |
| gnome | gdm | — | — |
| gnome | gdm | — | — |
| gnome | gdm | — | — |
| gnome | gdm | — | — |
| gnome | gdm | — | — |
| gnome | gdm | — | — |
| gnome | gdm | — | — |
| gnome | gdm | — | — |
| gnome | gdm | — | — |
| redhat | linux | — | — |
CVSS provenance
nvdv2.06.0MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P
vendor_redhat6.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-vf98-38qc-3w28: The Red Hat build script for the GNOME Display Manager (GDM) before 2
ghsa_unreviewed·2022-05-02·CVSS 6.0
CVE-2009-2697 [MEDIUM] CWE-287 GHSA-vf98-38qc-3w28: The Red Hat build script for the GNOME Display Manager (GDM) before 2
The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079.
GHSA
GHSA-245g-gjxh-59c2: Red Hat Enterprise Linux 4 does not properly compile and link gdm with tcp_wrappers on x86_64 platforms, which might allow remote attackers to bypass
ghsa_unreviewed·2022-05-01
CVE-2007-5079 [MEDIUM] GHSA-245g-gjxh-59c2: Red Hat Enterprise Linux 4 does not properly compile and link gdm with tcp_wrappers on x86_64 platforms, which might allow remote attackers to bypass
Red Hat Enterprise Linux 4 does not properly compile and link gdm with tcp_wrappers on x86_64 platforms, which might allow remote attackers to bypass intended access restrictions.
Red Hat
gdm not built with tcp_wrappers
vendor_redhat·2007-05-11·CVSS 6.0
CVE-2009-2697 [MEDIUM] gdm not built with tcp_wrappers
gdm not built with tcp_wrappers
The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079.
Red Hat
gdm with xdmcp ignoring tcp_wrappers on x86_64
vendor_redhat·2006-02-13·CVSS 6.0
CVE-2007-5079 [MEDIUM] gdm with xdmcp ignoring tcp_wrappers on x86_64
gdm with xdmcp ignoring tcp_wrappers on x86_64
Red Hat Enterprise Linux 4 does not properly compile and link gdm with tcp_wrappers on x86_64 platforms, which might allow remote attackers to bypass intended access restrictions.
Statement: Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=181302
The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64 [rhel-4.9]
bugzilla·2008-09-25·CVSS 6.0
CVE-2007-5079 [MEDIUM] CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64 [rhel-4.9]
CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64 [rhel-4.9]
+++ This bug was initially created as a clone of Bug #181302 +++
From Bugzilla Helper:
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; iOpus-I-M; SV1)
Description of problem:
The x86_64 bit version of AS4 (fully patched) appears to ignore tcp_wrappers completely when using gdm with XDMCP. The 32 bit version of AS4 works perfectly so this bug appears to be restricted to the 64bit version. I suspect the problem with the wrappers on the 64 bit version may be a bit more general than just XDMCP access as I tested a telnet server and while the wrappers are not completely ignored connections are not refused cleanly (You donât get the login prompt but you are still hooked up to the machine). The 32 bit vers
Bugzilla
CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64 [F7]
bugzilla·2007-11-01·CVSS 6.0
CVE-2007-5079 [MEDIUM] CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64 [F7]
CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64 [F7]
F7 tracking bug: see blocks bug list for full details of the security issue(s).
[bug automatically created by: add-tracking-bugs]
Discussion:
This message is a reminder that Fedora 7 is nearing the end of life. Approximately 30 (thirty) days from now Fedora will stop maintaining and issuing updates for Fedora 7. It is Fedora's policy to close all bug reports from releases that are no longer maintained. At that time this bug will be closed as WONTFIX if it remains open with a Fedora 'version' of '7'.
Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, simply change the 'version' to a later Fedora version prior to Fedora 7's end of life.
Bug Reporter:
Bugzilla
CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64 [Fdevel]
bugzilla·2007-11-01·CVSS 6.0
CVE-2007-5079 [MEDIUM] CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64 [Fdevel]
CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64 [Fdevel]
Fdevel tracking bug: see blocks bug list for full details of the security issue(s).
[bug automatically created by: add-tracking-bugs]
Discussion:
This message is a reminder that Fedora 8 is nearing its end of life.
Approximately 30 (thirty) days from now Fedora will stop maintaining
and issuing updates for Fedora 8. It is Fedora's policy to close all
bug reports from releases that are no longer maintained. At that time
this bug will be closed as WONTFIX if it remains open with a Fedora
'version' of '8'.
Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version'
to a later Fedora version prior to Fedora 8's end of life.
Bug R
Bugzilla
CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64 [F8]
bugzilla·2007-11-01·CVSS 6.0
CVE-2007-5079 [MEDIUM] CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64 [F8]
CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64 [F8]
F8 tracking bug: see blocks bug list for full details of the security issue(s).
[bug automatically created by: add-tracking-bugs]
Discussion:
This message is a reminder that Fedora 8 is nearing its end of life.
Approximately 30 (thirty) days from now Fedora will stop maintaining
and issuing updates for Fedora 8. It is Fedora's policy to close all
bug reports from releases that are no longer maintained. At that time
this bug will be closed as WONTFIX if it remains open with a Fedora
'version' of '8'.
Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version'
to a later Fedora version prior to Fedora 8's end of life.
Bug Reporter:
Bugzilla
CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64 [FC6]
bugzilla·2007-11-01·CVSS 6.0
CVE-2007-5079 [MEDIUM] CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64 [FC6]
CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64 [FC6]
FC6 tracking bug: see blocks bug list for full details of the security issue(s).
[bug automatically created by: add-tracking-bugs]
Discussion:
Hi,
We no longer support Fedora Core 6 and I am currently trying to get my open bug
count down to a more manageable state. I'm going to close this bug as WONTFIX.
If this issue is still a concern for you, would you mind trying to reproduce on
a supported version of Fedora and reopening?
(this is a mass message)
Bugzilla
CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64
bugzilla·2006-02-13·CVSS 6.0
CVE-2007-5079 [MEDIUM] CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64
CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64
From Bugzilla Helper:
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; iOpus-I-M; SV1)
Description of problem:
The x86_64 bit version of AS4 (fully patched) appears to ignore tcp_wrappers completely when using gdm with XDMCP. The 32 bit version of AS4 works perfectly so this bug appears to be restricted to the 64bit version. I suspect the problem with the wrappers on the 64 bit version may be a bit more general than just XDMCP access as I tested a telnet server and while the wrappers are not completely ignored connections are not refused cleanly (You donât get the login prompt but you are still hooked up to the machine). The 32 bit version again works perfectly.
Version-Release number of selected component (if
http://www.redhat.com/support/errata/RHSA-2010-0657.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=181302https://exchange.xforce.ibmcloud.com/vulnerabilities/36791http://www.redhat.com/support/errata/RHSA-2010-0657.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=181302https://exchange.xforce.ibmcloud.com/vulnerabilities/36791
2007-09-25
Published