CVE-2003-0548: Gnome Gdm

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a chosen host expires, a different issue than CVE-2003-0549.

Affected products

  • Gnome Gdm: version 2.2.0 only; version 2.4.1 only; version 2.4.1.1 only; version 2.4.1.2 only; version 2.4.1.3 only; version 2.4.1.4 only; …
  • Red Hat Enterprise Linux: version 2.1 only
  • Red Hat Kdebase: version 2.0_beta2.45 only; version 2.2.3.1.20 only; version 2.2.3.1.22 only; version 2.4.0.7.13 only; version 2.4.1.3.5 only
  • Red Hat Linux Advanced Workstation: version 2.1 only

Published 2003-08-27. Last modified 2026-06-16.