CVE-2011-0727

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of...

6.9 MediumFix available

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Exploit likelihood

0.38%Down 1.2 points since Feb 4, 2022

What each source reports

NVD Score used 6.9

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Record: CVE-2011-0727
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Record: CVE-2011-0727
Updated: 2026-11-02

EUVDEUVD-2011-0741 No score

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Record: EUVD-2011-0741
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vqj4-7669-fw9c No score

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of...

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Record: GHSA-vqj4-7669-fw9c
Weakness: CWE-59
Updated: 2026-11-02

OSV No score

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Record: CVE-2011-0727
Updated: 2026-11-02

OSVDEBIAN-CVE-2011-0727 No score

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Record: DEBIAN-CVE-2011-0727
Updated: 2026-11-02

Affected products

gnome gdm

Affected packages

Affected packages
Package	Affected	Fixed
`gdm3` Debian:12	before 2.30.5-9	2.30.5-9
`gdm3` Debian:13	before 2.30.5-9	2.30.5-9
`gdm3` Debian:14	before 2.30.5-9	2.30.5-9
`gdm3` Debian:6.0	before 2.30.5-6squeeze2, plus listed versions 2.30.5-62.30.5-6squeeze1	2.30.5-6squeeze2
`gdm` Red Hat:enterprise_linux:6::client	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-debuginfo` Red Hat:enterprise_linux:6::client	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-libs` Red Hat:enterprise_linux:6::client	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-fingerprint` Red Hat:enterprise_linux:6::client	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-smartcard` Red Hat:enterprise_linux:6::client	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-user-switch-applet` Red Hat:enterprise_linux:6::client	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1

Show 18 moreShow less

Affected packages
Package	Affected	Fixed
`gdm` Red Hat:enterprise_linux:6::computenode	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-debuginfo` Red Hat:enterprise_linux:6::computenode	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-libs` Red Hat:enterprise_linux:6::computenode	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-fingerprint` Red Hat:enterprise_linux:6::computenode	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-smartcard` Red Hat:enterprise_linux:6::computenode	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-user-switch-applet` Red Hat:enterprise_linux:6::computenode	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm` Red Hat:enterprise_linux:6::server	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-debuginfo` Red Hat:enterprise_linux:6::server	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-libs` Red Hat:enterprise_linux:6::server	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-fingerprint` Red Hat:enterprise_linux:6::server	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-smartcard` Red Hat:enterprise_linux:6::server	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-user-switch-applet` Red Hat:enterprise_linux:6::server	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm` Red Hat:enterprise_linux:6::workstation	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-debuginfo` Red Hat:enterprise_linux:6::workstation	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-libs` Red Hat:enterprise_linux:6::workstation	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-fingerprint` Red Hat:enterprise_linux:6::workstation	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-smartcard` Red Hat:enterprise_linux:6::workstation	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-user-switch-applet` Red Hat:enterprise_linux:6::workstation	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-0727 is a medium vulnerability (CVSS 6.9) in Gnome Gdm, published March 28, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in gdm3 2.30.5-9.

References

Show 22 moreShow less