CVE-2006-2452
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local...
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges.
Exploit likelihood
What each source reports
NVD Score used
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges.
- Record
CVE-2006-2452- CVSS 2.0
- 3.7 Low
AV:L/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges.
- Record
CVE-2006-2452- Updated
- 2026-11-02
EUVDEUVD-2006-2453 No score
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges.
- Record
EUVD-2006-2453- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8vvw-c8p7-x225 No score
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local...
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges.
- Record
GHSA-8vvw-c8p7-x225- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2452 is a low vulnerability (CVSS 3.7) in Gnome Gdm, published June 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. No source names a fixed version.
References
secunia.com/advisories/20532
lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html
vupen.com/english/advisories/2006/2239
usn.ubuntu.com/293-1
securityfocus.com/archive/1/436428
Show 10 moreShow less
bugzilla.gnome.org/show_bug.cgi?id=343476
gentoo.org/security/en/glsa/glsa-200606-14.xml
exchange.xforce.ibmcloud.com/vulnerabilities/27018
mandriva.com/security/advisories?name=MDKSA-2006:100
nvd.nist.gov/vuln/detail/CVE-2006-2452
github.com/advisories/GHSA-8vvw-c8p7-x225