Description
Format string vulnerability in the host chooser window (gdmchooser) in GNOME Foundation Display Manager (gdm) allows local users to execute arbitrary code via format string specifiers in a hostname, which are used in an error dialog.
References
- 23385 third-party-advisory
- 23387 third-party-advisory
- ADV-2006-5015 vdb-entry
- 23409 third-party-advisory
- 1017383 vdb-entry
- 1017320 vdb-entry
- 30848 vdb-entry
- gdmchooser-host-chooser-format-string(30896) vdb-entry
- 21597 vdb-entry
- 23381 third-party-advisory
- 20061214 GNOME Foundation Display Manager gdmchooser Format String Vulnerability third-party-advisory
- SUSE-SR:2006:029 vendor-advisory
- MDKSA-2006:231 vendor-advisory
- http://ftp.acc.umu.se/pub/GNOME/sources/gdm/2.17/gdm-2.17.4.news
- USN-396-1 vendor-advisory