CVE-2009-2697: Gnome Gdm

Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079.

Affected products

• Gnome Gdm: up to and including 2.16; version 0.7 only; version 1.0 only; version 2.0 only; version 2.2 only; version 2.3 only; …

Published 2009-09-04. Last modified 2026-06-16.