Ubuntu Security Notice (C) 2011-2013 Canonical, Inc. / NASL script (C) 2011-2013 Tenable Network Security, Inc.
The remote Ubuntu host is missing a security-related patch.
Henne Vogelsang discovered that under certain PolicyKit
configurations, GDM could be made to launch a browser. A local
attacker could exploit this to gain access to files with the
privileges of the gdm user. PolicyKit is not configured in this manner
in Ubuntu by default.
Update the affected gdm package.
Risk factor :
High / CVSS Base Score : 7.2
Family: Ubuntu Local Security Checks
Nessus Plugin ID: 55105 ()
CVE ID: CVE-2011-1709