gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gpm | Alessandro_rubini | 1.18.1 (including) | 1.18.1 (including) |
| Gpm | Alessandro_rubini | 1.19 (including) | 1.19 (including) |
| Debian_linux | Debian | 2.0 (including) | 2.0 (including) |
| Debian_linux | Debian | 2.1 (including) | 2.1 (including) |
| Debian_linux | Debian | 2.2 (including) | 2.2 (including) |
| Linux | Redhat | 6.0 (including) | 6.0 (including) |
| Linux | Redhat | 6.1 (including) | 6.1 (including) |
| Linux | Redhat | 6.2 (including) | 6.2 (including) |
| Suse_linux | Suse | 5.3 (including) | 5.3 (including) |
| Suse_linux | Suse | 6.0 (including) | 6.0 (including) |
| Suse_linux | Suse | 6.1 (including) | 6.1 (including) |
| Suse_linux | Suse | 6.2 (including) | 6.2 (including) |
| Suse_linux | Suse | 6.3 (including) | 6.3 (including) |