1.9
CVE-2010-2387
- EPSS 0.14%
- Veröffentlicht 21.12.2012 05:46:13
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Quelle secalert_us@oracle.com
- CVE-Watchlists
- Unerledigt
Loginvicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnome ≫ Gnome Display Manager Version2.20.0
Gnome ≫ Gnome Display Manager Version2.20.1
Gnome ≫ Gnome Display Manager Version2.20.2
Gnome ≫ Gnome Display Manager Version2.20.3
Gnome ≫ Gnome Display Manager Version2.20.4
Gnome ≫ Gnome Display Manager Version2.20.5
Gnome ≫ Gnome Display Manager Version2.20.6
Gnome ≫ Gnome Display Manager Version2.20.7
Gnome ≫ Gnome Display Manager Version2.20.8
Gnome ≫ Gnome Display Manager Version2.20.9
Gnome ≫ Gnome Display Manager Version2.20.10
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.14% | 0.335 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 1.9 | 3.4 | 2.9 |
AV:L/AC:M/Au:N/C:P/I:N/A:N
|