VULNERABILITY INTELLIGENCE
CVE-2006-1057
CVSS score3.7 LOW
EPSS probability0.28%
CISA KEVNot currently listed
Published2006-04-25
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:P/I:P/A:P
Description
Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.
Weakness classification
- CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')