1.9
CVE-2010-2387
- EPSS 0.09%
- Veröffentlicht 21.12.2012 05:46:13
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle secalert_us@oracle.com
- Teams Watchlist Login
- Unerledigt Login
vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnome ≫ Gnome Display Manager Version2.20.0
Gnome ≫ Gnome Display Manager Version2.20.1
Gnome ≫ Gnome Display Manager Version2.20.2
Gnome ≫ Gnome Display Manager Version2.20.3
Gnome ≫ Gnome Display Manager Version2.20.4
Gnome ≫ Gnome Display Manager Version2.20.5
Gnome ≫ Gnome Display Manager Version2.20.6
Gnome ≫ Gnome Display Manager Version2.20.7
Gnome ≫ Gnome Display Manager Version2.20.8
Gnome ≫ Gnome Display Manager Version2.20.9
Gnome ≫ Gnome Display Manager Version2.20.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.09% | 0.233 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 1.9 | 3.4 | 2.9 |
AV:L/AC:M/Au:N/C:P/I:N/A:N
|