Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 11.04 USN-1142-1 Critical: GDM Information Leak Attack

ubuntu
Calendar Grey June 1, 2011
Scroller Ubuntu
GDM flaw in Ubuntu may enable local adversaries to extract system details through a web browser.
GDM could be made to launch a browser and leak information about the system.

Summary

GDM could be made to launch a browser and leak information about the system.

Software Description:

- gdm: GNOME Display Manager

Details:

Henne Vogelsang discovered that under certain PolicyKit configurations, GDM

could be made to launch a browser. A local attacker could exploit this to

gain access to files with the privileges of the gdm user. PolicyKit is not

configured in this manner in Ubuntu by default.

Topics%20covered

Topics Covered

security advisory information leak local exploit ubuntu gdm

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  gdm                             2.32.1-0ubuntu3.2

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

CVE-2011-1709

Severity
critical
Lowest
Low
Medium
High
Critical

June 01, 2011

Topics%20covered

Topics Covered

security advisory information leak local exploit ubuntu gdm

Package Information

https://launchpad.net/ubuntu/+source/gdm/2.32.1-0ubuntu3.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.