CVE-2006-2452

Published: Jun 9, 2006Modified: Apr 16, 2026

3.7

Vector

AV:L/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 1.9 / Impact: 6.4

Source: NVD

Description

GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges.

Affected (4)

Products: Gnome: Gdm

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Gnome Gdm	Version 2.12
Gnome Gdm	Version 2.14
Gnome Gdm	Version 2.15
Gnome Gdm	Version 2.8

References (28)

http://bugzilla.gnome.org/show_bug.cgi?id=343476

Source: secalert@redhat.com

http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html

Source: secalert@redhat.com

http://secunia.com/advisories/20532

Source: secalert@redhat.com

http://secunia.com/advisories/20552

Source: secalert@redhat.com

http://secunia.com/advisories/20587

Source: secalert@redhat.com

http://secunia.com/advisories/20627

Source: secalert@redhat.com

http://secunia.com/advisories/20636

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200606-14.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:100

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/436428

Source: secalert@redhat.com

http://www.securityfocus.com/bid/18332

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/2239

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/27018

Source: secalert@redhat.com

https://usn.ubuntu.com/293-1/

Source: secalert@redhat.com

http://bugzilla.gnome.org/show_bug.cgi?id=343476

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20532

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20552

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20587

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20627

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20636

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200606-14.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:100

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/436428

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18332

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/2239

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/27018

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/293-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.