Secunia Logo
Netsikker nu! 2008
 
Red Hat update for gdm
Secunia Advisory: SA9589
Release Date: 2003-08-22
Popularity: 8,128 views

Critical:
Less critical
Impact: Exposure of sensitive information
DoS
Where: From local network
Solution Status: Vendor Patch

OS:RedHat Enterprise Linux AS 2.1
RedHat Enterprise Linux ES 2.1
RedHat Enterprise Linux WS 2.1
RedHat Linux 7.1
RedHat Linux 7.2
RedHat Linux 7.3
RedHat Linux 8.0
RedHat Linux 9
RedHat Linux Advanced Workstation 2.1 for Itanium

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2003-0547
CVE-2003-0548
CVE-2003-0549


Description:
Red Hat has issued updated packages for gdm. These fix three vulnerabilities, which can be exploited by malicious users to cause a DoS (Denial of Service) on the gdm daemon or read the content of arbitrary files on a vulnerable system.

For more information:
http://secunia.com/advisories/9571/

NOTE: The arbitrary file content disclosure vulnerability only affects versions 8.0 and 9. Furthermore, the XDMCP protocol is not enabled by default.

Solution:
Updated packages for Enterprise Linux and Advanced Workstation are available via Red Hat Network:
http://rhn.redhat.com


Updated packages:

-- Red Hat Linux 7.1 --

SRPMS:
ftp://updates.redhat.com/7.1/en/os/SRPMS/gdm-2.0beta2-46.src.rpm

i386:
ftp://updates.redhat.com/7.1/en/os/i386/gdm-2.0beta2-46.i386.rpm


-- Red Hat Linux 7.1 for iSeries (64 bit) --

SRPMS:
ftp://updates.redhat.com/7.1/en/os/iSeries/SRPMS/gdm-2.0beta2-46.src.rpm

ppc:
ftp://updates.redhat.com/7.1/en/os/iSeries/ppc/gdm-2.0beta2-46.ppc.rpm


-- Red Hat Linux 7.1 for pSeries (64 bit) --

SRPMS:
ftp://updates.redhat.com/7.1/en/os/pSeries/SRPMS/gdm-2.0beta2-46.src.rpm

ppc:
ftp://updates.redhat.com/7.1/en/os/pSeries/ppc/gdm-2.0beta2-46.ppc.rpm


-- Red Hat Linux 7.2 --

SRPMS:
ftp://updates.redhat.com/7.2/en/os/SRPMS/gdm-2.2.3.1-21.src.rpm

i386:
ftp://updates.redhat.com/7.2/en/os/i386/gdm-2.2.3.1-21.i386.rpm

ia64:
ftp://updates.redhat.com/7.2/en/os/ia64/gdm-2.2.3.1-21.ia64.rpm


-- Red Hat Linux 7.3 --

SRPMS:
ftp://updates.redhat.com/7.3/en/os/SRPMS/gdm-2.2.3.1-23.src.rpm

i386:
ftp://updates.redhat.com/7.3/en/os/i386/gdm-2.2.3.1-23.i386.rpm


-- Red Hat Linux 8.0 --

SRPMS:
ftp://updates.redhat.com/8.0/en/os/SRPMS/gdm-2.4.0.7-14.src.rpm

i386:
ftp://updates.redhat.com/8.0/en/os/i386/gdm-2.4.0.7-14.i386.rpm


-- Red Hat Linux 9 --

SRPMS:
ftp://updates.redhat.com/9/en/os/SRPMS/gdm-2.4.1.3-5.1.src.rpm

i386:
ftp://updates.redhat.com/9/en/os/i386/gdm-2.4.1.3-5.1.i386.rpm

Original Advisory:
http://rhn.redhat.com/errata/RHSA-2003-258.html
http://rhn.redhat.com/errata/RHSA-2003-259.html


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Today
New advisories: 7
New vulnerabilities: 26
Updated advisories: 10

Highly // 10 views
Opera Multiple Vulnerabilities
Moderately // 63 views
Red Hat update for condor
Moderately // 60 views
Condor Multiple Vulnerabilities
Moderately // 86 views
Gentoo update for wordnet
Moderately // 95 views
Red Hat update for kernel

7th Oct, 2008
New advisories: 19
New vulnerabilities: 68
Updated advisories: 61

Moderately // 463 views
Debian update for php5
Moderately // 363 views
Atarone CMS Multiple Vulnerabilities

Solutions | More...  


Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Red Hat update for kernel // 80 views
2. Gentoo update for wordnet // 71 views
3. Debian update for php5 // 60 views
4. Adobe Flash Player "Clickjacking" Security Bypass Vulnerability // 59 views
5. Red Hat update for condor // 40 views
6. Atarone CMS Multiple Vulnerabilities // 38 views
7. Condor Multiple Vulnerabilities // 37 views
8. SUSE update for openssh // 33 views
9. Debian update for squid // 32 views
10. Juniper Products Neighbor Discovery Protocol Neighbor Solicitation Vulnerability // 31 views