Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-2387

Опубликовано: 21 дек. 2012
Источник: nvd
CVSS2: 1.9
EPSS Низкий

Описание

vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnome:gnome_display_manager:2.20.0:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gnome_display_manager:2.20.1:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gnome_display_manager:2.20.2:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gnome_display_manager:2.20.3:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gnome_display_manager:2.20.4:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gnome_display_manager:2.20.5:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gnome_display_manager:2.20.6:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gnome_display_manager:2.20.7:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gnome_display_manager:2.20.8:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gnome_display_manager:2.20.9:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gnome_display_manager:2.20.10:*:*:*:*:*:*:*

EPSS

Процентиль: 26%
0.00091
Низкий

1.9 Low

CVSS2

Дефекты

CWE-255

Связанные уязвимости

ubuntu
около 13 лет назад

vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.

redhat
почти 17 лет назад

vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.

debian
около 13 лет назад

vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x bef ...

github
больше 3 лет назад

vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.

EPSS

Процентиль: 26%
0.00091
Низкий

1.9 Low

CVSS2

Дефекты

CWE-255