Approved changes feed: RSS · Atom
cpe:2.3:a:gnome:gdm:2.4.1.1:*:*:*:*:*:*:*
part: a version: 2.4.1.1 update: *
| Vendor | Gnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5) |
|---|---|
| Product | Gdm (4c33b3e3-bdfe-5b63-8eb7-aedcd4cf047b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/gnome/gdm |
purl2cpe | 2026-06-01 10:17:24.563943 |
pkg:gitlab/gnome/gdm |
purl2cpe | 2026-06-01 10:17:24.563945 |
pkg:gnome/gdm |
purl2cpe | 2026-06-01 10:17:24.563946 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2003-0794 |
vulnerable | 2026-06-08 04:47:22.557907 |
Details available
GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not limit the number or duration of commands and uses a blocking socket connection, which allows attackers to cause a denial of service (resource exhaustion) by sending commands and not reading the results.
Published: 2003-10-21T04:00:00.000Z
Updated: 2024-08-08T02:05:12.556Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0793 |
vulnerable | 2026-06-08 04:47:22.555950 |
Details available
GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not restrict the size of input, which allows attackers to cause a denial of service (memory consumption).
Published: 2003-10-21T04:00:00.000Z
Updated: 2024-08-08T02:05:12.607Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0549 |
vulnerable | 2026-06-08 04:47:21.804889 |
Details available
The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) via a short authorization key name.
Published: 2003-08-22T04:00:00.000Z
Updated: 2024-08-08T01:58:10.982Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0548 |
vulnerable | 2026-06-08 04:47:21.797093 |
Details available
The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a chosen host expires, a different issue than CVE-2003-0549.
Published: 2003-08-22T04:00:00.000Z
Updated: 2024-08-08T01:58:10.905Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0547 |
vulnerable | 2026-06-08 04:47:21.790712 |
Details available
GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.
Published: 2003-08-22T04:00:00.000Z
Updated: 2024-08-08T01:58:11.017Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.