Search/CVE-2010-2387

● CVE

CVE-2010-2387

VendorgnomeProductgnome display managerDiscoveredDec 21, 2012UpdatedApr 29, 2026

vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.

View graph Watch Export

CVSS v3.1

—

EPSS

0.52%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Related IOCs

0

seen in the same coverage

Connections

2 relationships

Timeline

disclosure → media coverage

Dec 21, 2012

Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026

Public PoC (1)

github.com/LogSec/CVE-2010-2387

Unverified third-party code — review before executing.