CVEvulnerability
CVE-2010-2387
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-12-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.
Affected configurations
• gnome gnome display manager 2.20.0
• gnome gnome display manager 2.20.1
• gnome gnome display manager 2.20.2
• gnome gnome display manager 2.20.3
• gnome gnome display manager 2.20.4
• gnome gnome display manager 2.20.5
• gnome gnome display manager 2.20.6
• gnome gnome display manager 2.20.7
• gnome gnome display manager 2.20.8
• gnome gnome display manager 2.20.9
• gnome gnome display manager 2.20.10
Related
Weakness · not in database (1)
References
- http://ftp.gnome.org/pub/GNOME/sources/gdm/2.20/gdm-2.20.11.changes ftp.gnome.org
- http://secunia.com/advisories/40690 Vendor Advisory
- http://secunia.com/advisories/40780 Vendor Advisory
- http://www.auscert.org.au/13123 US Government Resource
- http://www.osvdb.org/66643 www.osvdb.org
- https://blogs.oracle.com/sunsecurity/entry/cve_2010_2387_password_disclosure blogs.oracle.com
- https://bugzilla.gnome.org/show_bug.cgi?id=571846 bugzilla.gnome.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60642 exchange.xforce.ibmcloud.com
- http://ftp.gnome.org/pub/GNOME/sources/gdm/2.20/gdm-2.20.11.changes ftp.gnome.org
- http://secunia.com/advisories/40690 Vendor Advisory
- http://secunia.com/advisories/40780 Vendor Advisory
- http://www.auscert.org.au/13123 US Government Resource
- http://www.osvdb.org/66643 www.osvdb.org
- https://blogs.oracle.com/sunsecurity/entry/cve_2010_2387_password_disclosure blogs.oracle.com
- https://bugzilla.gnome.org/show_bug.cgi?id=571846 bugzilla.gnome.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60642 exchange.xforce.ibmcloud.com