CVE-2003-0547
GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read...
CVE-2003-0547 is a low vulnerability (CVSS 2.1) in Gnome Gdm, published August 22, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. No source names a fixed version.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.37%EPSS, 31st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.
Exploit likelihood
Affected products
What each source reports
NVD Score used
GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.
- Record
CVE-2003-0547- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE ListNo score
GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.
- Record
CVE-2003-0547- Updated
- 2026-11-02
EUVDEUVD-2003-0541No score
GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.
- Record
EUVD-2003-0541- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q6fq-g7c2-m78jNo score
GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read...
GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.
- Record
GHSA-q6fq-g7c2-m78j- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000729
redhat.com/support/errata/RHSA-2003-258.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A112
mail.gnome.org/archives/gnome-hackers/2003-August/msg00045.html
marc.info?l=bugtraq&m=106194792924122&w=2
nvd.nist.gov/vuln/detail/CVE-2003-0547
github.com/advisories/GHSA-q6fq-g7c2-m78j