Linux Security
    Linux Security
    Linux Security

    Ubuntu: gdm vulnerability

    Date
    3761
    Posted By
    A format string vulnerability was discovered in the gdmchooser component of the GNOME Display Manager. By typing a specially crafted host name, local users could gain gdm user privileges, which could lead to further account information exposure.
    =========================================================== 
    Ubuntu Security Notice USN-396-1          December 14, 2006
    gdm vulnerability
    CVE-2006-6105
    ===========================================================
    
    A security issue affects the following Ubuntu releases:
    
    Ubuntu 6.06 LTS
    Ubuntu 6.10
    
    This advisory also applies to the corresponding versions of
    Kubuntu, Edubuntu, and Xubuntu.
    
    The problem can be corrected by upgrading your system to the
    following package versions:
    
    Ubuntu 6.06 LTS:
      gdm                                      2.14.10-0ubuntu1.1
    
    Ubuntu 6.10:
      gdm                                      2.16.1-0ubuntu4.1
    
    After a standard system upgrade you need to reboot your computer to
    effect the necessary changes.
    
    Details follow:
    
    A format string vulnerability was discovered in the gdmchooser component 
    of the GNOME Display Manager.  By typing a specially crafted host name, 
    local users could gain gdm user privileges, which could lead to further 
    account information exposure.
    
    
    Updated packages for Ubuntu 6.06 LTS:
    
      Source archives:
    
        https://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.14.10-0ubuntu1.1.diff.gz
          Size/MD5:    75226 062d37bcd1e10af4ed62467cb411cd2a
        https://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.14.10-0ubuntu1.1.dsc
          Size/MD5:      886 85410f15a0ac5d3e78afd528675bb070
        https://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.14.10.orig.tar.gz
          Size/MD5:  4699371 5a3767866e33bab2f553eccaa448b260
    
      amd64 architecture (Athlon64, Opteron, EM64T Xeon)
    
        https://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.14.10-0ubuntu1.1_amd64.deb
          Size/MD5:  1788460 d2ab3139edb370415541b32dc2ff8224
    
      i386 architecture (x86 compatible Intel/AMD)
    
        https://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.14.10-0ubuntu1.1_i386.deb
          Size/MD5:  1722546 ac6d2fbc6e6ff9979543a6a0f9ab755e
    
      powerpc architecture (Apple Macintosh G3/G4/G5)
    
        https://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.14.10-0ubuntu1.1_powerpc.deb
          Size/MD5:  1771750 77cf61ea08fa7f6fa9541cf3555aefae
    
      sparc architecture (Sun SPARC/UltraSPARC)
    
        https://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.14.10-0ubuntu1.1_sparc.deb
          Size/MD5:  1732952 0c9d3b1b35c0003a8ec9555620bb86fd
    
    Updated packages for Ubuntu 6.10:
    
      Source archives:
    
        https://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.16.1-0ubuntu4.1.diff.gz
          Size/MD5:    78060 309e27f53d2461f82fd6345e218adc15
        https://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.16.1-0ubuntu4.1.dsc
          Size/MD5:      883 c2d212cf7792747c0402b94bfbb6aed5
        https://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.16.1.orig.tar.gz
          Size/MD5:  4878838 a2e68fac4763f1cf1050eeb19accb43f
    
      amd64 architecture (Athlon64, Opteron, EM64T Xeon)
    
        https://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.16.1-0ubuntu4.1_amd64.deb
          Size/MD5:  1774968 f616e84bcdb3e14a36971d83f43ab7c3
    
      i386 architecture (x86 compatible Intel/AMD)
    
        https://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.16.1-0ubuntu4.1_i386.deb
          Size/MD5:  1727524 9a2cbc1b3977738e32f506cf5cfc1617
    
      powerpc architecture (Apple Macintosh G3/G4/G5)
    
        https://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.16.1-0ubuntu4.1_powerpc.deb
          Size/MD5:  1762732 fc833e0417bbc5d785ae653d12bd904f
    
      sparc architecture (Sun SPARC/UltraSPARC)
    
        https://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.16.1-0ubuntu4.1_sparc.deb
          Size/MD5:  1723264 6ba26002800130986e94d112d839fedf
    
    
    

    LinuxSecurity Poll

    Which aspect of server security are you most interested in learning more about?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/38-which-aspect-of-server-security-are-you-most-interested-in-learning-more-about?task=poll.vote&format=json
    38
    radio
    [{"id":"131","title":"Preventing information leakage","votes":"1","type":"x","order":"1","pct":100,"resources":[]},{"id":"132","title":"Firewall considerations","votes":"0","type":"x","order":"2","pct":0,"resources":[]},{"id":"133","title":"Permissions ","votes":"0","type":"x","order":"3","pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350


    VIEW MORE POLLS

    bottom 200

    Please enable / Bitte aktiviere JavaScript!
    Veuillez activer / Por favor activa el Javascript![ ? ]

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.