CVE-2012-0943

2014-05-2223:55:02

CWE-264

canonical

web.nvd.nist.gov

cve-2012-0943

light display manager

lightdm

local users

arbitrary files

ubuntu linux

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

Percentile

15.5%

JSON

debian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT per ADT1/ADT2 due to different codebases and affected versions. CVE-2012-6648 has been assigned for the gdm-guest-session issue.

Affected configurations

Nvd

Node

robert_ancelllightdmMatch1.0.0

robert_ancelllightdmMatch1.0.1

robert_ancelllightdmMatch1.0.2

robert_ancelllightdmMatch1.0.3

robert_ancelllightdmMatch1.0.4

robert_ancelllightdmMatch1.0.5

robert_ancelllightdmMatch1.1.0

robert_ancelllightdmMatch1.1.1

robert_ancelllightdmMatch1.1.2

robert_ancelllightdmMatch1.1.3

robert_ancelllightdmMatch1.1.4

robert_ancelllightdmMatch1.1.5

robert_ancelllightdmMatch1.1.6

canonicalubuntu_linuxMatch11.10

VendorProductVersionCPE
robert_ancelllightdm1.0.0cpe:2.3:a:robert_ancell:lightdm:1.0.0:*:*:*:*:*:*:*
robert_ancelllightdm1.0.1cpe:2.3:a:robert_ancell:lightdm:1.0.1:*:*:*:*:*:*:*
robert_ancelllightdm1.0.2cpe:2.3:a:robert_ancell:lightdm:1.0.2:*:*:*:*:*:*:*
robert_ancelllightdm1.0.3cpe:2.3:a:robert_ancell:lightdm:1.0.3:*:*:*:*:*:*:*
robert_ancelllightdm1.0.4cpe:2.3:a:robert_ancell:lightdm:1.0.4:*:*:*:*:*:*:*
robert_ancelllightdm1.0.5cpe:2.3:a:robert_ancell:lightdm:1.0.5:*:*:*:*:*:*:*
robert_ancelllightdm1.1.0cpe:2.3:a:robert_ancell:lightdm:1.1.0:*:*:*:*:*:*:*
robert_ancelllightdm1.1.1cpe:2.3:a:robert_ancell:lightdm:1.1.1:*:*:*:*:*:*:*
robert_ancelllightdm1.1.2cpe:2.3:a:robert_ancell:lightdm:1.1.2:*:*:*:*:*:*:*
robert_ancelllightdm1.1.3cpe:2.3:a:robert_ancell:lightdm:1.1.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
robert_ancell	lightdm	1.0.0	cpe:2.3:a:robert_ancell:lightdm:1.0.0:::::::*
robert_ancell	lightdm	1.0.1	cpe:2.3:a:robert_ancell:lightdm:1.0.1:::::::*
robert_ancell	lightdm	1.0.2	cpe:2.3:a:robert_ancell:lightdm:1.0.2:::::::*
robert_ancell	lightdm	1.0.3	cpe:2.3:a:robert_ancell:lightdm:1.0.3:::::::*
robert_ancell	lightdm	1.0.4	cpe:2.3:a:robert_ancell:lightdm:1.0.4:::::::*
robert_ancell	lightdm	1.0.5	cpe:2.3:a:robert_ancell:lightdm:1.0.5:::::::*
robert_ancell	lightdm	1.1.0	cpe:2.3:a:robert_ancell:lightdm:1.1.0:::::::*
robert_ancell	lightdm	1.1.1	cpe:2.3:a:robert_ancell:lightdm:1.1.1:::::::*
robert_ancell	lightdm	1.1.2	cpe:2.3:a:robert_ancell:lightdm:1.1.2:::::::*
robert_ancell	lightdm	1.1.3	cpe:2.3:a:robert_ancell:lightdm:1.1.3:::::::*