Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2003-0547

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

GDM（GNOME Display Manager，GNOME显示管理器）是GNOME项目组所研发的一种GNOME显示环境的管理器，也是一个图形化登录程序。XDMCP是X显示管理控制协议。 GDM不安全处理'.xsession-errors'文件，本地攻击者可以利用这个漏洞以root用户权限查看系统上敏感文件内容。 这个漏洞可以通过GDM的"检查会话错误"特征来完成，此功能用于显示在调用用户HOME目录下'.xsession-errors'文件中的内容。由于在处理这个文件时没有进行充分的过滤检查，可导致攻

AI Predicted 4.3 Difficulty: Easy EPSS 0.37% · P31
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2003-0547

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
GDM Xsession-Errors不安全文件处理漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GDM（GNOME Display Manager，GNOME显示管理器）是GNOME项目组所研发的一种GNOME显示环境的管理器，也是一个图形化登录程序。XDMCP是X显示管理控制协议。 GDM不安全处理'.xsession-errors'文件，本地攻击者可以利用这个漏洞以root用户权限查看系统上敏感文件内容。 这个漏洞可以通过GDM的"检查会话错误"特征来完成，此功能用于显示在调用用户HOME目录下'.xsession-errors'文件中的内容。由于在处理这个文件时没有进行充分的过滤检查，可导致攻
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2003-0547

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2003-0547

请登录查看更多情报信息。

Vendor Advisories for CVE-2003-0547 (1)

Mailing List Discussions for CVE-2003-0547 (1)

Other References for CVE-2003-0547 (3)

Same Patch Batch · n/a · 2003-08-22 · 8 CVEs total

CVE-2003-0530 Microsoft Internet Explorer 安全漏洞
CVE-2003-0531 Microsoft Internet Explorer 安全漏洞
CVE-2003-0532 Microsoft Internet Explorer 安全漏洞
CVE-2003-0548 X Display Manager Control Protocol (XDMCP)服务拒绝漏洞
CVE-2003-0549 X Display Manager Control Protocol (XDMCP)服务拒绝漏洞
CVE-2003-0699 Linux C-Media PCI声音驱动程序漏洞
CVE-2003-0701 Microsoft Internet Explorer安全漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2003-0547

No comments yet

Leave a comment