CVE-2007-3381

CVE Details

Release Date:	2007-08-07
Impact:	Moderate	What is this?

Description

The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return values from the g_strsplit function, which allows local users to cause a denial of service (persistent daemon crash) via a crafted command to the daemon's socket, related to (1) gdm.c and (2) gdmconfig.c in daemon/, and (3) gdmconfig.c and (4) gdmflexiserver.c in gui/.

See more information about CVE-2007-3381 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v2 metrics

Base Score:	1.5
Vector String:	AV:L/AC:M/Au:S/C:N/I:N/A:P
Version:	2.0
Attack Vector:	Local
Attack Complexity:	Medium
Authentication:	Single
Confidentiality Impact:	None
Integrity Impact:	None
Availability Impact:	Partial

Errata information

Platform	Errata	Release Date
Oracle Linux version 5 (gdm)	ELSA-2007-0777	2007-08-09