Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2003-0547

EPSS 0.11% · P29
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2003-0547

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
GDM Xsession-Errors不安全文件处理漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GDM(GNOME Display Manager,GNOME显示管理器)是GNOME项目组所研发的一种GNOME显示环境的管理器,也是一个图形化登录程序。XDMCP是X显示管理控制协议。 GDM不安全处理'.xsession-errors'文件,本地攻击者可以利用这个漏洞以root用户权限查看系统上敏感文件内容。 这个漏洞可以通过GDM的"检查会话错误"特征来完成,此功能用于显示在调用用户HOME目录下'.xsession-errors'文件中的内容。由于在处理这个文件时没有进行充分的过滤检查,可导致攻
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2003-0547

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2003-0547

登录查看更多情报信息。

Same Patch Batch · n/a · 2003-08-22 · 8 CVEs total

CVE-2003-0530Microsoft Internet Explorer 安全漏洞
CVE-2003-0531Microsoft Internet Explorer 安全漏洞
CVE-2003-0532Microsoft Internet Explorer 安全漏洞
CVE-2003-0548X Display Manager Control Protocol (XDMCP)服务拒绝漏洞
CVE-2003-0549X Display Manager Control Protocol (XDMCP)服务拒绝漏洞
CVE-2003-0699Linux C-Media PCI声音驱动程序漏洞
CVE-2003-0701Microsoft Internet Explorer安全漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2003-0547

No comments yet


Leave a comment