Light Display Manager vulnerability

2013-09-1200:00:00

ubuntu.com

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

Releases

Ubuntu 13.04

Packages

lightdm - Display Manager

Details

It was discovered that Light Display Manager created .Xauthority files with
incorrect permissions. A local attacker could use this flaw to bypass
access restrictions.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.04noarchlightdm< 1.6.0-0ubuntu3.1UNKNOWN
Ubuntu13.04noarchgir1.2-lightdm-1< 1.6.0-0ubuntu3.1UNKNOWN
Ubuntu13.04noarchliblightdm-gobject-1-0< 1.6.0-0ubuntu3.1UNKNOWN
Ubuntu13.04noarchliblightdm-gobject-1-dev< 1.6.0-0ubuntu3.1UNKNOWN
Ubuntu13.04noarchliblightdm-qt-2-0< 1.6.0-0ubuntu3.1UNKNOWN
Ubuntu13.04noarchliblightdm-qt-2-dev< 1.6.0-0ubuntu3.1UNKNOWN
Ubuntu13.04noarchliblightdm-qt5-2-0< 1.6.0-0ubuntu3.1UNKNOWN
Ubuntu13.04noarchliblightdm-qt5-2-dev< 1.6.0-0ubuntu3.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.04	noarch	lightdm	< 1.6.0-0ubuntu3.1	UNKNOWN
Ubuntu	13.04	noarch	gir1.2-lightdm-1	< 1.6.0-0ubuntu3.1	UNKNOWN
Ubuntu	13.04	noarch	liblightdm-gobject-1-0	< 1.6.0-0ubuntu3.1	UNKNOWN
Ubuntu	13.04	noarch	liblightdm-gobject-1-dev	< 1.6.0-0ubuntu3.1	UNKNOWN
Ubuntu	13.04	noarch	liblightdm-qt-2-0	< 1.6.0-0ubuntu3.1	UNKNOWN
Ubuntu	13.04	noarch	liblightdm-qt-2-dev	< 1.6.0-0ubuntu3.1	UNKNOWN
Ubuntu	13.04	noarch	liblightdm-qt5-2-0	< 1.6.0-0ubuntu3.1	UNKNOWN
Ubuntu	13.04	noarch	liblightdm-qt5-2-dev	< 1.6.0-0ubuntu3.1	UNKNOWN