6.9

CVE-2013-4169: gnome gnome_display_manager Link Following

CVSS: 6.9v2.0MediumModified
AliasesRHSA-2013:1213
Published 10-09-2013Last modified 16-09-2024

Vulnerability summary

CVE-2013-4169 is a medium (CVSS 6.9) Link Following vulnerability in gnome gnome_display_manager. EPSS estimates a 0.37% chance of exploitation in the next 30 days, higher than 29.5% of scored vulnerabilities.

Overall risk
28/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.9/10
010
Medium · v2.0 (NVD)
EPSS score
0.37%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 10-09-2013
    PublishedVulnerability first disclosed.
  2. 16-09-2024
    Last modifiedVulnerability information updated.

Description

GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

0.37%

Chance of exploitation in the next 30 days

Percentile

30%

Versus all other CVEs

30-day change

0.00 pp

From 0.37% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.37%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat5 products
  • gdm< 1:2.16.0-59.el5_9.1
  • gdm-debuginfo< 1:2.16.0-59.el5_9.1
  • gdm-docs< 1:2.16.0-59.el5_9.1
  • initscripts< 0:8.45.42-2.el5_9.1
  • initscripts-debuginfo< 0:8.45.42-2.el5_9.1
Gnome1 product
  • gnome_display_manager≤ 2.21 | 0.7 | 1.0 | 2.0 | 2.2 | 2.13 | 2.14 | 2.14.1 | 2.14.2 | 2.14.3 | 2.14.4 | 2.14.5 | 2.14.6 | 2.14.7 | 2.14.8 | 2.14.9 | 2.14.10 | 2.14.11 | 2.14.12 | 2.15 | 2.16 | 2.16.1 | 2.16.2 | 2.17 | 2.18 | 2.18.1 | 2.18.2 | 2.18.3 | 2.19 | 2.19.1 | 2.19.2 | 2.19.3 | 2.19.4 | 2.20.0 | 2.20.1 | 2.20.2 | 2.20.3 | 2.20.4 | 2.20.5 | 2.20.6 | 2.20.7 | 2.20.8 | 2.20.9 | 2.20.10

2 vendors · 6 products

References

10 links