Vulnerability Report

CVE-2011-0727

Title: Gnome Gdm

Other

Proof Of Concept

No public PoC currently indexed for CVE-2011-0727.

CWE Category CWE-59

Published Date Mar 31, 2011

Modified Date Jun 16, 2026

Exploit Status Not Found

Score 6.9 CVSS v2.0

Exploit Probability (EPSS)

0.38%

Vulnerability Summary

CVE-2011-0727: GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Impacted Vendors

gnome 1

Reference Links

http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.1.news http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057333.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057931.html http://mail.gnome.org/archives/gdm-list/2011-March/msg00020.html http://secunia.com/advisories/43714 http://secunia.com/advisories/43854 http://secunia.com/advisories/44021 http://securitytracker.com/id?1025264 http://www.debian.org/security/2011/dsa-2205 http://www.mandriva.com/security/advisories?name=MDVSA-2011:070 http://www.redhat.com/support/errata/RHSA-2011-0395.html http://www.securityfocus.com/bid/47063 http://www.ubuntu.com/usn/USN-1099-1 http://www.vupen.com/english/advisories/2011/0786 http://www.vupen.com/english/advisories/2011/0787 http://www.vupen.com/english/advisories/2011/0797 http://www.vupen.com/english/advisories/2011/0847 http://www.vupen.com/english/advisories/2011/0911 https://bugzilla.redhat.com/show_bug.cgi?id=688323 https://exchange.xforce.ibmcloud.com/vulnerabilities/66377 http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.1.news http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057333.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057931.html http://mail.gnome.org/archives/gdm-list/2011-March/msg00020.html http://secunia.com/advisories/43714 http://secunia.com/advisories/43854 http://secunia.com/advisories/44021 http://securitytracker.com/id?1025264 http://www.debian.org/security/2011/dsa-2205 http://www.mandriva.com/security/advisories?name=MDVSA-2011:070 http://www.redhat.com/support/errata/RHSA-2011-0395.html http://www.securityfocus.com/bid/47063 http://www.ubuntu.com/usn/USN-1099-1 http://www.vupen.com/english/advisories/2011/0786 http://www.vupen.com/english/advisories/2011/0787 http://www.vupen.com/english/advisories/2011/0797 http://www.vupen.com/english/advisories/2011/0847 http://www.vupen.com/english/advisories/2011/0911 https://bugzilla.redhat.com/show_bug.cgi?id=688323 https://exchange.xforce.ibmcloud.com/vulnerabilities/66377

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

6.9

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:L/AC:M/Au:N/C:C/I:C/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2011-0727 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 29, 2026 MODIFIED

Vulnerability data updated via NVD.

April 11, 2025 MODIFIED

Vulnerability data or affected products updated.

March 31, 2011 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:L/AC:M/Au:N/C:C/I:C/A:C

Affected Stack

No specific products linked.