CVE-2011-0727

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of...

6.9 MediumFix available

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Exploit likelihood

0.38%Down 1.2 points since Feb 4, 2022

What each source reports

NVD Score used6.9

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Record: CVE-2011-0727
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-59
Updated: 2026-11-02

CVE ListNo score

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Record: CVE-2011-0727
Updated: 2026-11-02

EUVDEUVD-2011-0741No score

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Record: EUVD-2011-0741
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vqj4-7669-fw9cNo score

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of...

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Record: GHSA-vqj4-7669-fw9c
Weakness: CWE-59
Updated: 2026-11-02

OSVNo score

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Record: CVE-2011-0727
Updated: 2026-11-02

OSVDEBIAN-CVE-2011-0727No score

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Record: DEBIAN-CVE-2011-0727
Updated: 2026-11-02

Affected products

gnome gdm

Affected packages

Affected packages
Package	Affected	Fixed
`gdm3` Debian:12	before 2.30.5-9	2.30.5-9
`gdm3` Debian:13	before 2.30.5-9	2.30.5-9
`gdm3` Debian:14	before 2.30.5-9	2.30.5-9
`gdm3` Debian:6.0	before 2.30.5-6squeeze2, plus listed versions 2.30.5-62.30.5-6squeeze1	2.30.5-6squeeze2
`gdm` Red Hat:enterprise_linux:6::client	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-debuginfo` Red Hat:enterprise_linux:6::client	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-libs` Red Hat:enterprise_linux:6::client	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-fingerprint` Red Hat:enterprise_linux:6::client	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-smartcard` Red Hat:enterprise_linux:6::client	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-user-switch-applet` Red Hat:enterprise_linux:6::client	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1

Show 18 moreShow less

Affected packages
Package	Affected	Fixed
`gdm` Red Hat:enterprise_linux:6::computenode	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-debuginfo` Red Hat:enterprise_linux:6::computenode	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-libs` Red Hat:enterprise_linux:6::computenode	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-fingerprint` Red Hat:enterprise_linux:6::computenode	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-smartcard` Red Hat:enterprise_linux:6::computenode	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-user-switch-applet` Red Hat:enterprise_linux:6::computenode	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm` Red Hat:enterprise_linux:6::server	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-debuginfo` Red Hat:enterprise_linux:6::server	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-libs` Red Hat:enterprise_linux:6::server	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-fingerprint` Red Hat:enterprise_linux:6::server	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-smartcard` Red Hat:enterprise_linux:6::server	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-user-switch-applet` Red Hat:enterprise_linux:6::server	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm` Red Hat:enterprise_linux:6::workstation	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-debuginfo` Red Hat:enterprise_linux:6::workstation	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-libs` Red Hat:enterprise_linux:6::workstation	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-fingerprint` Red Hat:enterprise_linux:6::workstation	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-plugin-smartcard` Red Hat:enterprise_linux:6::workstation	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1
`gdm-user-switch-applet` Red Hat:enterprise_linux:6::workstation	before 1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1

History

History
Recorded	Changed	Sources
Nov 10, 2026	facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-0727 is a medium vulnerability (CVSS 6.9) in Gnome Gdm, published March 28, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in gdm3 2.30.5-9.

References

Show 22 moreShow less