Approved changes feed: RSS · Atom

cpe:2.3:a:x.org:xdm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorX.Org (4cd053ee-09df-594a-873d-dbd09ec2f899)
ProductXdm (9743c329-d655-5236-93ca-eb9f3fc6ba7b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-5215 vulnerable 2026-06-03 14:27:45.312014 Details available
The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /tmp/xses-$USER file.
Published: 2006-10-09T21:00:00.000Z
Updated: 2024-08-07T19:41:05.758Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.