CVE-2010-2387

概要

参考情報

• ftp.gnome.org/pub/GNOME/sources/gdm/2.20/gdm-2.20.11.changes
• secunia.com/advisories/40690 · Vendor Advisory
• secunia.com/advisories/40780 · Vendor Advisory
• auscert.org.au/13123 · US Government Resource
• osvdb.org/66643
• blogs.oracle.com/sunsecurity/entry/cve_2010_2387_password_disclosure
• bugzilla.gnome.org/show_bug.cgi
• exchange.xforce.ibmcloud.com/vulnerabilities/60642

gnome display manager のその他の脆弱性

• CVE-2020-27837中 6.4A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the …
• CVE-2020-16125中 6.8gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely …
• CVE-2016-1000002低 2.4gdm3 3.14.2 and possibly later has an information leak before screen lock
• CVE-2019-3825中 6.4A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen …
• CVE-2018-14424高 7.8The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a…