CVE-2010-2387

CVE-2010-2387 describes a vulnerability in GNOME Display Manager (GDM) versions 2.20.x before 2.20.11, specifically in the vicious-extensions/ve-misc.c component. When GDM debugging is enabled and a user's password contains invalid UTF-8 characters, the system logs the password to syslog, potentially allowing local users to gain privileges by accessing these logs. The vulnerability has a low severity CVSS score of 1.9 (AV:L/AC:M/Au:N/C:P/I:N/A:N), indicating a local attack vector with medium complexity and a potential impact of partial confidentiality loss. Its FAUCET Risk Score is 5/100, and its EPSS score is very low, suggesting minimal exploitability in the wild. There is no evidence of active exploitation, and no public exploit code is available via Metasploit, Nuclei, or ExploitDB. The CVE has received no community discussion or media coverage, further indicating a lack of widespread attention or exploitation.