CVE-2013-4169: gnome gnome_display_manager Link Following
CVSS: 6.9v2.0MediumModified
AliasesRHSA-2013:1213
Published 10-09-2013Last modified 16-09-2024
Vulnerability summary
CVE-2013-4169 is a medium (CVSS 6.9) Link Following vulnerability in gnome gnome_display_manager. EPSS estimates a 0.37% chance of exploitation in the next 30 days, higher than 29.5% of scored vulnerabilities.
CVSS score
6.9/10
010
Medium · v2.0 (NVD)EPSS score
0.37%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 10-09-2013PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/.
CVSS metrics
1 score · 1 source · 1 versionMedium 6.9Preferred score · NVD (NIST)
AV:L/AC:M/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
0.37%
Chance of exploitation in the next 30 days
Percentile
30%
Versus all other CVEs
30-day change
0.00 pp
From 0.37% on 19-09-2026
19-09-202619-10-2026
EPSS score0.37%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat5 products
- gdm< 1:2.16.0-59.el5_9.1
- gdm-debuginfo< 1:2.16.0-59.el5_9.1
- gdm-docs< 1:2.16.0-59.el5_9.1
- initscripts< 0:8.45.42-2.el5_9.1
- initscripts-debuginfo< 0:8.45.42-2.el5_9.1
Gnome1 product
- gnome_display_manager≤ 2.21 | 0.7 | 1.0 | 2.0 | 2.2 | 2.13 | 2.14 | 2.14.1 | 2.14.2 | 2.14.3 | 2.14.4 | 2.14.5 | 2.14.6 | 2.14.7 | 2.14.8 | 2.14.9 | 2.14.10 | 2.14.11 | 2.14.12 | 2.15 | 2.16 | 2.16.1 | 2.16.2 | 2.17 | 2.18 | 2.18.1 | 2.18.2 | 2.18.3 | 2.19 | 2.19.1 | 2.19.2 | 2.19.3 | 2.19.4 | 2.20.0 | 2.20.1 | 2.20.2 | 2.20.3 | 2.20.4 | 2.20.5 | 2.20.6 | 2.20.7 | 2.20.8 | 2.20.9 | 2.20.10
2 vendors · 6 products