CVE-2011-0727

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

• CWE-59

• http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.1.news
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057333.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057931.html
• http://mail.gnome.org/archives/gdm-list/2011-March/msg00020.htmlPatch
• http://secunia.com/advisories/43714Vendor Advisory
• http://secunia.com/advisories/43854Vendor Advisory
• http://secunia.com/advisories/44021
• http://securitytracker.com/id?1025264
• http://www.debian.org/security/2011/dsa-2205
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:070
• http://www.redhat.com/support/errata/RHSA-2011-0395.html
• http://www.securityfocus.com/bid/47063
• http://www.ubuntu.com/usn/USN-1099-1
• http://www.vupen.com/english/advisories/2011/0786Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0787Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0797Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0847
• http://www.vupen.com/english/advisories/2011/0911
• https://bugzilla.redhat.com/show_bug.cgi?id=688323Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66377
• http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.1.news
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057333.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057931.html
• http://mail.gnome.org/archives/gdm-list/2011-March/msg00020.htmlPatch
• http://secunia.com/advisories/43714Vendor Advisory
• http://secunia.com/advisories/43854Vendor Advisory
• http://secunia.com/advisories/44021
• http://securitytracker.com/id?1025264
• http://www.debian.org/security/2011/dsa-2205
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:070
• http://www.redhat.com/support/errata/RHSA-2011-0395.html
• http://www.securityfocus.com/bid/47063
• http://www.ubuntu.com/usn/USN-1099-1
• http://www.vupen.com/english/advisories/2011/0786Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0787Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0797Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0847
• http://www.vupen.com/english/advisories/2011/0911
• https://bugzilla.redhat.com/show_bug.cgi?id=688323Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66377

Published

Mar 31, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0721Multiple CRLF injection vulnerabilities in (1) chfn and (2) …
• CVE-2011-0722FFmpeg before 0.5.4, as used in MPlayer and other products, …
• CVE-2011-0723FFmpeg 0.5.x, as used in MPlayer and other products, allows …
• CVE-2011-0724The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does no…
• CVE-2011-0725Absolute path traversal vulnerability in the org.debian.apt.…
• CVE-2011-0726The do_task_stat function in fs/proc/array.c in the Linux ke…
• CVE-2011-0728Cross-site scripting (XSS) vulnerability in templatefunction…
• CVE-2011-0729dbus_backend/ls-dbus-backend in the D-Bus backend in languag…
• CVE-2011-0730Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as u…
• CVE-2011-0731Buffer overflow in the DB2 Administration Server (DAS) compo…
• CVE-2011-0732Multiple unspecified vulnerabilities in IBM Tivoli Integrate…
• CVE-2011-0733Cross-site scripting (XSS) vulnerability in Adobe ColdFusion…