CVE-2010-2387 | BDVDB-2026-53870 Detail
Description#
vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://bugzilla.gnome.org/show_bug.cgi?id=571846
- http://www.auscert.org.au/13123
- https://blogs.oracle.com/sunsecurity/entry/cve_2010_2387_password_disclosure
- http://secunia.com/advisories/40690
- http://ftp.gnome.org/pub/GNOME/sources/gdm/2.20/gdm-2.20.11.changes
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60642
- http://secunia.com/advisories/40780
- http://www.osvdb.org/66643
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.