GCVE - cpe:2.3:a:simone_rota:slim_simple_login

Approved changes feed: RSS · Atom

cpe:2.3:a:simone_rota:slim_simple_login_manager:1.3.0:*:*:*:*:*:*:*

part: a version: 1.3.0 update: *

Vendor	Simone Rota (`f3e6ccca-8b7d-5617-a894-b7dd7b6b7819`)
Product	Slim Simple Login Manager (`649b4ea1-c590-58a3-b4bc-6263b160a5be`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:deb/debian/slim`	purl2cpe	2026-06-01 10:10:57.764716
`pkg:deb/ubuntu/slim`	purl2cpe	2026-06-01 10:10:57.764717
`pkg:github/iwamatsu/slim`	purl2cpe	2026-06-01 10:10:57.764719
`pkg:github/simonerota/slim`	purl2cpe	2026-06-01 10:10:57.764720
`pkg:rpm/fedora/slim`	purl2cpe	2026-06-01 10:10:57.764721
`pkg:sourceforge/slim.berlios`	purl2cpe	2026-06-01 10:10:57.764723

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-2945`	vulnerable	2026-06-08 04:55:11.717607	Details available The default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the default_path option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp. Published: 2010-08-30T19:00:00.000Z Updated: 2024-08-07T02:55:45.483Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2010/08/20/10 http://svn.berlios.de/viewvc/slim?view=revision&revision=171 http://www.openwall.com/lists/oss-security/2010/08/19/8 http://secunia.com/advisories/41005	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1756`	vulnerable	2026-06-08 04:51:24.719538	Details available SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments. Published: 2009-05-22T01:00:00.000Z Updated: 2024-08-07T05:27:53.661Z Open on db.gcve.eu Reference links http://osvdb.org/54583 https://exchange.xforce.ibmcloud.com/vulnerabilities/50611 http://www.securityfocus.com/bid/35015 https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00000.html http://secunia.com/advisories/38070	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.