Vulnerability Details CVE-2009-2697
The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 43.0%
CVSS Severity
CVSS v2 Score 6.8
References
- http://secunia.com/advisories/36553
- http://www.securityfocus.com/bid/36219
- https://bugzilla.redhat.com/show_bug.cgi?id=239818
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9586
- https://rhn.redhat.com/errata/RHSA-2009-1364.html
- http://secunia.com/advisories/36553
- http://www.securityfocus.com/bid/36219
- https://bugzilla.redhat.com/show_bug.cgi?id=239818
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9586
- https://rhn.redhat.com/errata/RHSA-2009-1364.html
Products affected by CVE-2009-2697
-
cpe:2.3:a:gnome:gdm:*
-
cpe:2.3:a:gnome:gdm:0.7
-
cpe:2.3:a:gnome:gdm:1.0
-
cpe:2.3:a:gnome:gdm:2.0
-
cpe:2.3:a:gnome:gdm:2.13
-
cpe:2.3:a:gnome:gdm:2.14
-
cpe:2.3:a:gnome:gdm:2.15
-
cpe:2.3:a:gnome:gdm:2.2
-
cpe:2.3:a:gnome:gdm:2.3
-
cpe:2.3:a:gnome:gdm:2.4
-
cpe:2.3:a:gnome:gdm:2.5
-
cpe:2.3:a:gnome:gdm:2.6
-
cpe:2.3:a:gnome:gdm:2.8
-
cpe:2.3:o:redhat:enterprise_linux:5