GNOME Foundation GDM .ICEauthority 不当文件权限漏洞

漏洞信息详情

GNOME Foundation GDM .ICEauthority 不当文件权限漏洞

• CNNVD编号：CNNVD-200604-435
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2006-1057
  
• 漏洞类型：
  
  
  竞争条件
  
• 发布时间：
  
  2006-04-24
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2006-09-05
  
• 厂        商：
  
  gnome
• 漏洞来源：
  Marcus Meissner is…

当GDM对.ICEauthority文件执行chown和chgrp操作时， GDM 2.14.1之前的版本中的daemon/slave.c中的竞争状态允许本地用户借助于符号链接攻击获取权限。

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

GNOME GDM 2.8.0.5

Ubuntu gdm_2.8.0.5-0ubuntu1.1_amd64.deb

Ubuntu 5.10 (Breezy Badger)

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.8.0.5-0ubuntu1 .1_amd64.deb

Ubuntu gdm_2.8.0.5-0ubuntu1.1_i386.deb

Ubuntu 5.10 (Breezy Badger)

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.8.0.5-0ubuntu1 .1_i386.deb

Ubuntu gdm_2.8.0.5-0ubuntu1.1_powerpc.deb

Ubuntu 5.10 (Breezy Badger)

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.8.0.5-0ubuntu1 .1_powerpc.deb

GNOME GDM 2.6.0.8

Debian gdm_2.6.0.8-1sarge2_alpha.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _alpha.deb

Debian gdm_2.6.0.8-1sarge2_amd64.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _amd64.deb

Debian gdm_2.6.0.8-1sarge2_arm.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _arm.deb

Debian gdm_2.6.0.8-1sarge2_hppa.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _hppa.deb

Debian gdm_2.6.0.8-1sarge2_i386.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _i386.deb

Debian gdm_2.6.0.8-1sarge2_ia64.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _ia64.deb

Debian gdm_2.6.0.8-1sarge2_m68k.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _m68k.deb

Debian gdm_2.6.0.8-1sarge2_mips.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _mips.deb

Debian gdm_2.6.0.8-1sarge2_mipsel.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _mipsel.deb

Debian gdm_2.6.0.8-1sarge2_powerpc.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _powerpc.deb

Debian gdm_2.6.0.8-1sarge2_s390.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _s390.deb

Debian gdm_2.6.0.8-1sarge2_sparc.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/g/gdm/gdm_2.6.0.8-1sarge2 _sparc.deb

GNOME GDM 2.6.0.7

Ubuntu gdm_2.6.0.7-0ubuntu7.1_amd64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.6.0.7-0ubuntu7 .1_amd64.deb

Ubuntu gdm_2.6.0.7-0ubuntu7.1_i386.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.6.0.7-0ubuntu7 .1_i386.deb

Ubuntu gdm_2.6.0.7-0ubuntu7.1_powerpc.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.6.0.7-0ubuntu7 .1_powerpc.deb

GNOME GDM 2.8.0.4

Mandriva gdm-2.8.0.4-1.1.20060mdk.i586.rpm

Mandriva Linux 2006.0:

http://wwwnew.mandriva.com/en/downloads/

Mandriva gdm-2.8.0.4-1.1.20060mdk.x86_64.rpm

Mandriva Linux 2006.0:

http://wwwnew.mandriva.com/en/downloads/

Mandriva gdm-Xnest-2.8.0.4-1.1.20060mdk.i586.rpm

Mandriva Linux 2006.0:

http://wwwnew.mandriva.com/en/downloads/

Mandriva gdm-Xnest-2.8.0.4-1.1.20060mdk.x86_64.rpm

Mandriva Linux 2006.0:

http://wwwnew.mandriva.com/en/downloads/

来源: FEDORA

名称: FEDORA-2006-338

链接:https://www.redhat.com/archives/fedora-announce-list/2006-April/msg00160.html

来源: VUPEN

名称: ADV-2006-1465

链接:http://www.frsirt.com/english/advisories/2006/1465

来源: DEBIAN

名称: DSA-1040

链接:http://www.debian.org/security/2006/dsa-1040

来源: bugzilla.redhat.com

链接:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188303

来源: UBUNTU

名称: USN-278-1

链接:http://www.ubuntulinux.org/support/documentation/usn/usn-278-1

来源: BID

名称: 17635

链接:http://www.securityfocus.com/bid/17635

来源: MANDRIVA

名称: MDKSA-2006:083

链接:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:083

来源: cvs.gnome.org

链接:http://cvs.gnome.org/viewcvs/gdm2/daemon/slave.c?r1=1.260&r2=1.261

来源: XF

名称: gdm-slavec-symlink(26092)

链接:http://xforce.iss.net/xforce/xfdb/26092

来源: REDHAT

名称: RHSA-2007:0286

链接:http://www.redhat.com/support/errata/RHSA-2007-0286.html

来源: MANDRIVA

名称: MDKSA-2006:083

链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:083