CVE-2010-2387

NIEDRIG 1.9CVE-2010-2387 · Published 21/12/2012 · updated 16/06/2026

Kurz gesagt

CVE-2010-2387 ist eine Schwachstelle (NIEDRIG (CVSS 1.9)) in gnome display manager (gnome).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.52%, höher als bei 44.5% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
gnome display manager gnome	`= 2.20.0= 2.20.1= 2.20.10= 2.20.2= 2.20.3= 2.20.4= 2.20.5= 2.20.6= 2.20.7= 2.20.8= 2.20.9`	No fix yet

Description

vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.

References

ftp.gnome.org/pub/GNOME/sources/gdm/2.20/gdm-2.20.11.changes
secunia.com/advisories/40690 · Vendor Advisory
secunia.com/advisories/40780 · Vendor Advisory
auscert.org.au/13123 · US Government Resource
osvdb.org/66643
blogs.oracle.com/sunsecurity/entry/cve_2010_2387_password_disclosure
bugzilla.gnome.org/show_bug.cgi
exchange.xforce.ibmcloud.com/vulnerabilities/60642

Weitere Schwachstellen in gnome display manager

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gnome display manager

gnome

= 2.20.0= 2.20.1= 2.20.10= 2.20.2= 2.20.3= 2.20.4= 2.20.5= 2.20.6= 2.20.7= 2.20.8= 2.20.9

No fix yet

Weitere Schwachstellen in gnome display manager

Alle anzeigen →