{"id":"CVE-2013-4169","aliases":["EUVD-2013-4094","GHSA-j642-2qgg-v4wq","RHSA-2013:1213"],"status":"published","title":"GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary...","description":"GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/.","severity":{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00371,"percentile":0.31227,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2013-09-10T19:00:00Z","modified":"2026-06-16T23:56:44Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"gdm","fixed_in":["1:2.16.0-59.el5_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"gdm-debuginfo","fixed_in":["1:2.16.0-59.el5_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"gdm-docs","fixed_in":["1:2.16.0-59.el5_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"initscripts","fixed_in":["0:8.45.42-2.el5_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"initscripts-debuginfo","fixed_in":["0:8.45.42-2.el5_9.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.0-59.el5_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gdm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.0-59.el5_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gdm-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.0-59.el5_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"initscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.45.42-2.el5_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"initscripts-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.45.42-2.el5_9.1"}]}]}],"products":[{"vendor":"gnome","product":"gnome_display_manager"}],"references":[{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=988498","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://secunia.com/advisories/54661","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1213.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4169","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-j642-2qgg-v4wq"},{"url":"https://access.redhat.com/errata/RHSA-2013:1213","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=988498","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1213.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4169","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4169","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2013-4169","description":"GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/.","status":"published","published":"2013-09-10T19:00:00Z","modified":"2024-09-16T19:04:55.123Z","updated_at":"2026-11-02T14:34:57.869657Z"}],"euvd":[{"id":"EUVD-2013-4094","description":"GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/.","status":"published","published":"2013-09-10T19:00:00Z","modified":"2024-09-16T19:04:55Z","updated_at":"2026-11-03T00:55:26.73018Z"}],"ghsa":[{"id":"GHSA-j642-2qgg-v4wq","title":"GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary...","description":"GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/.","status":"published","published":"2022-05-17T05:04:53Z","modified":"2023-01-28T05:03:10Z","cwes":["CWE-59"],"updated_at":"2026-11-02T14:43:55.582977Z"}],"nvd":[{"id":"CVE-2013-4169","description":"GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/.","status":"published","published":"2013-09-10T19:55:11.207Z","modified":"2026-06-16T23:56:44.92Z","cvss":[{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:02:35.248411Z"}],"osv":[{"id":"RHSA-2013:1213","title":"Red Hat Security Advisory: gdm security update","status":"published","published":"2024-09-15T21:04:26Z","modified":"2026-03-19T10:01:27Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}