NuytsTech Security

CVE-2006-1057

by ·

Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.

Date published : 2006-04-24

http://www.securityfocus.com/bid/17635

http://cvs.gnome.org/viewcvs/gdm2/daemon/slave.c?r1=1.260&r2=1.261

Tags: