CVE-2006-1057

Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a...

3.7 LowFix available

Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.

Exploit likelihood

0.28%Down 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 3.7

Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.

Record: CVE-2006-1057
CVSS 2.0: 3.7 LowAV:L/AC:H/Au:N/C:P/I:P/A:P
Weakness: CWE-362
Updated: 2026-11-02

CVE List No score

Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.

Record: CVE-2006-1057
Updated: 2026-11-02

EUVDEUVD-2006-1061 No score

Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.

Record: EUVD-2006-1061
Updated: 2026-11-03

GitHub AdvisoriesGHSA-4g9q-73fx-cqxq No score

Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a...

Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.

Record: GHSA-4g9q-73fx-cqxq
Weakness: CWE-362
Updated: 2026-11-02

Affected products

gnome gdm

Affected packages

Affected packages
Package	Affected	Fixed
`gdm` Debian:3.1	before 2.6.0.8-1sarge2, plus listed versions 2.6.0.8-12.6.0.8-1sarge1	2.6.0.8-1sarge2
`gdm` Red Hat:enterprise_linux:4::as	before 1:2.6.0.5-7.rhel4.15	1:2.6.0.5-7.rhel4.15
`gdm-debuginfo` Red Hat:enterprise_linux:4::as	before 1:2.6.0.5-7.rhel4.15	1:2.6.0.5-7.rhel4.15
`gdm` Red Hat:enterprise_linux:4::desktop	before 1:2.6.0.5-7.rhel4.15	1:2.6.0.5-7.rhel4.15
`gdm-debuginfo` Red Hat:enterprise_linux:4::desktop	before 1:2.6.0.5-7.rhel4.15	1:2.6.0.5-7.rhel4.15
`gdm` Red Hat:enterprise_linux:4::es	before 1:2.6.0.5-7.rhel4.15	1:2.6.0.5-7.rhel4.15
`gdm-debuginfo` Red Hat:enterprise_linux:4::es	before 1:2.6.0.5-7.rhel4.15	1:2.6.0.5-7.rhel4.15
`gdm` Red Hat:enterprise_linux:4::ws	before 1:2.6.0.5-7.rhel4.15	1:2.6.0.5-7.rhel4.15
`gdm-debuginfo` Red Hat:enterprise_linux:4::ws	before 1:2.6.0.5-7.rhel4.15	1:2.6.0.5-7.rhel4.15

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-1057 is a low vulnerability (CVSS 3.7) in Gnome Gdm, published April 24, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in gdm 2.6.0.8-1sarge2.

References

Show 15 moreShow less