Lucene search

RedhatCVE-2013-4459

HistoryNov 23, 2013 - 6:55 p.m.

CVE-2013-4459

2013-11-2318:55:04

CWE-264

redhat

web.nvd.nist.gov

cve-2013-4459

lightdm

apparmor

local users

bypass

guest account

nvd

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.2

Confidence

Low

EPSS

Percentile

5.1%

JSON

LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account.

Affected configurations

Nvd

Node

robert_ancelllightdmMatch1.7.5

robert_ancelllightdmMatch1.7.6

robert_ancelllightdmMatch1.7.7

robert_ancelllightdmMatch1.7.8

robert_ancelllightdmMatch1.7.9

robert_ancelllightdmMatch1.7.10

robert_ancelllightdmMatch1.7.11

robert_ancelllightdmMatch1.7.12

robert_ancelllightdmMatch1.7.13

robert_ancelllightdmMatch1.7.14

robert_ancelllightdmMatch1.7.15

robert_ancelllightdmMatch1.7.16

robert_ancelllightdmMatch1.7.17

robert_ancelllightdmMatch1.7.18

robert_ancelllightdmMatch1.8.0

robert_ancelllightdmMatch1.8.1

robert_ancelllightdmMatch1.8.2

robert_ancelllightdmMatch1.8.3

robert_ancelllightdmMatch1.9.0

robert_ancelllightdmMatch1.9.1

Node

canonicalubuntu_linuxMatch13.10

VendorProductVersionCPE
robert_ancelllightdm1.7.5cpe:2.3:a:robert_ancell:lightdm:1.7.5:*:*:*:*:*:*:*
robert_ancelllightdm1.7.6cpe:2.3:a:robert_ancell:lightdm:1.7.6:*:*:*:*:*:*:*
robert_ancelllightdm1.7.7cpe:2.3:a:robert_ancell:lightdm:1.7.7:*:*:*:*:*:*:*
robert_ancelllightdm1.7.8cpe:2.3:a:robert_ancell:lightdm:1.7.8:*:*:*:*:*:*:*
robert_ancelllightdm1.7.9cpe:2.3:a:robert_ancell:lightdm:1.7.9:*:*:*:*:*:*:*
robert_ancelllightdm1.7.10cpe:2.3:a:robert_ancell:lightdm:1.7.10:*:*:*:*:*:*:*
robert_ancelllightdm1.7.11cpe:2.3:a:robert_ancell:lightdm:1.7.11:*:*:*:*:*:*:*
robert_ancelllightdm1.7.12cpe:2.3:a:robert_ancell:lightdm:1.7.12:*:*:*:*:*:*:*
robert_ancelllightdm1.7.13cpe:2.3:a:robert_ancell:lightdm:1.7.13:*:*:*:*:*:*:*
robert_ancelllightdm1.7.14cpe:2.3:a:robert_ancell:lightdm:1.7.14:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
robert_ancell	lightdm	1.7.5	cpe:2.3:a:robert_ancell:lightdm:1.7.5:::::::*
robert_ancell	lightdm	1.7.6	cpe:2.3:a:robert_ancell:lightdm:1.7.6:::::::*
robert_ancell	lightdm	1.7.7	cpe:2.3:a:robert_ancell:lightdm:1.7.7:::::::*
robert_ancell	lightdm	1.7.8	cpe:2.3:a:robert_ancell:lightdm:1.7.8:::::::*
robert_ancell	lightdm	1.7.9	cpe:2.3:a:robert_ancell:lightdm:1.7.9:::::::*
robert_ancell	lightdm	1.7.10	cpe:2.3:a:robert_ancell:lightdm:1.7.10:::::::*
robert_ancell	lightdm	1.7.11	cpe:2.3:a:robert_ancell:lightdm:1.7.11:::::::*
robert_ancell	lightdm	1.7.12	cpe:2.3:a:robert_ancell:lightdm:1.7.12:::::::*
robert_ancell	lightdm	1.7.13	cpe:2.3:a:robert_ancell:lightdm:1.7.13:::::::*
robert_ancell	lightdm	1.7.14	cpe:2.3:a:robert_ancell:lightdm:1.7.14:::::::*