exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Mandriva Linux Security Advisory 2011-070

Mandriva Linux Security Advisory 2011-070
Posted Apr 8, 2011
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2011-070 - GNOME Display Manager 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a face icon file under /var/cache/gdm/. The updated packages have been patched to correct this issue.

tags | advisory, arbitrary, local
systems | linux, mandriva
advisories | CVE-2011-0727
SHA-256 | 0f118fb359865e8ede51fb480d81a21ec3b20361b945d201f83a80eb5aee21c4

Mandriva Linux Security Advisory 2011-070

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2011:070
http://www.mandriva.com/security/
_______________________________________________________________________

Package : gdm
Date : April 8, 2011
Affected: 2010.1
_______________________________________________________________________

Problem Description:

A vulnerability has been found and corrected in gdm:

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to
change the ownership of arbitrary files via a symlink attack on a
(1) dmrc or (2) face icon file under /var/cache/gdm/ (CVE-2011-0727).

The updated packages have been patched to correct this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0727
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2010.1:
b87ae8a9f6a053127277eb001955e5cd 2010.1/i586/gdm-2.30.2-12.1mdv2010.2.i586.rpm
b28d795dc551c5fee6c3b3bff0e8ce17 2010.1/i586/gdm-user-switch-applet-2.30.2-12.1mdv2010.2.i586.rpm
7298db5dd01ccefbc36f4294c6f03de8 2010.1/SRPMS/gdm-2.30.2-12.1mdv2010.2.src.rpm

Mandriva Linux 2010.1/X86_64:
4afc1c392fdc386d949321a28f5e9783 2010.1/x86_64/gdm-2.30.2-12.1mdv2010.2.x86_64.rpm
4a3f57e5bce8f18f558e2ff72a3259cf 2010.1/x86_64/gdm-user-switch-applet-2.30.2-12.1mdv2010.2.x86_64.rpm
7298db5dd01ccefbc36f4294c6f03de8 2010.1/SRPMS/gdm-2.30.2-12.1mdv2010.2.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFNnr6RmqjQ0CJFipgRAmKwAKDgFRAyryAqzWcw6kPdr/ZIv82f9ACfSKhU
3ive0BmxtR3EZlFtQ8GIYKw=
=pAJA
-----END PGP SIGNATURE-----
Login or Register to add favorites

File Archive:

April 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Apr 1st
    10 Files
  • 2
    Apr 2nd
    26 Files
  • 3
    Apr 3rd
    40 Files
  • 4
    Apr 4th
    6 Files
  • 5
    Apr 5th
    26 Files
  • 6
    Apr 6th
    0 Files
  • 7
    Apr 7th
    0 Files
  • 8
    Apr 8th
    22 Files
  • 9
    Apr 9th
    14 Files
  • 10
    Apr 10th
    10 Files
  • 11
    Apr 11th
    13 Files
  • 12
    Apr 12th
    14 Files
  • 13
    Apr 13th
    0 Files
  • 14
    Apr 14th
    0 Files
  • 15
    Apr 15th
    30 Files
  • 16
    Apr 16th
    10 Files
  • 17
    Apr 17th
    22 Files
  • 18
    Apr 18th
    45 Files
  • 19
    Apr 19th
    0 Files
  • 20
    Apr 20th
    0 Files
  • 21
    Apr 21st
    0 Files
  • 22
    Apr 22nd
    0 Files
  • 23
    Apr 23rd
    0 Files
  • 24
    Apr 24th
    0 Files
  • 25
    Apr 25th
    0 Files
  • 26
    Apr 26th
    0 Files
  • 27
    Apr 27th
    0 Files
  • 28
    Apr 28th
    0 Files
  • 29
    Apr 29th
    0 Files
  • 30
    Apr 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close