• info
• discussion
• exploit
• solution
• references

GNOME Foundation GDM .ICEauthority Improper File Permissions Vulnerability

Solution:
This issue has been addressed in the latest CVS repository.

Please see the referenced vendor advisories for more information.


GNOME GDM 2.8.0.5

• Ubuntu gdm_2.8.0.5-0ubuntu1.1_amd64.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.8.0.5-0ubuntu1 .1_amd64.deb


• Ubuntu gdm_2.8.0.5-0ubuntu1.1_i386.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.8.0.5-0ubuntu1 .1_i386.deb


• Ubuntu gdm_2.8.0.5-0ubuntu1.1_powerpc.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.8.0.5-0ubuntu1 .1_powerpc.deb

GNOME GDM 2.6.0.8

• Debian gdm_2.6.0.8-1sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _alpha.deb


• Debian gdm_2.6.0.8-1sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _amd64.deb


• Debian gdm_2.6.0.8-1sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _arm.deb


• Debian gdm_2.6.0.8-1sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _hppa.deb


• Debian gdm_2.6.0.8-1sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _i386.deb


• Debian gdm_2.6.0.8-1sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _ia64.deb


• Debian gdm_2.6.0.8-1sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _m68k.deb


• Debian gdm_2.6.0.8-1sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _mips.deb


• Debian gdm_2.6.0.8-1sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _mipsel.deb


• Debian gdm_2.6.0.8-1sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _powerpc.deb


• Debian gdm_2.6.0.8-1sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _s390.deb


• Debian gdm_2.6.0.8-1sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _sparc.deb

GNOME GDM 2.6.0.7

• Ubuntu gdm_2.6.0.7-0ubuntu7.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.6.0.7-0ubuntu7 .1_amd64.deb


• Ubuntu gdm_2.6.0.7-0ubuntu7.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.6.0.7-0ubuntu7 .1_i386.deb


• Ubuntu gdm_2.6.0.7-0ubuntu7.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.6.0.7-0ubuntu7 .1_powerpc.deb

GNOME GDM 2.8.0.4

• Mandriva gdm-2.8.0.4-1.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva gdm-2.8.0.4-1.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva gdm-Xnest-2.8.0.4-1.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva gdm-Xnest-2.8.0.4-1.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/