Light Display Manager vulnerability

2013-11-0600:00:00

ubuntu.com

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

Percentile

5.1%

JSON

Releases

Ubuntu 13.10

Packages

lightdm - Display Manager

Details

Christian Prim discovered that Light Display Manager incorrectly applied
the AppArmor security profile when the Guest account is used. A local
attacker could use this issue to possibly gain access to sensitive
information.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.10noarchlightdm< 1.8.4-0ubuntu1UNKNOWN
Ubuntu13.10noarchgir1.2-lightdm-1< 1.8.4-0ubuntu1UNKNOWN
Ubuntu13.10noarchliblightdm-gobject-1-0< 1.8.4-0ubuntu1UNKNOWN
Ubuntu13.10noarchliblightdm-gobject-1-dev< 1.8.4-0ubuntu1UNKNOWN
Ubuntu13.10noarchliblightdm-qt-3-0< 1.8.4-0ubuntu1UNKNOWN
Ubuntu13.10noarchliblightdm-qt-dev< 1.8.4-0ubuntu1UNKNOWN
Ubuntu13.10noarchliblightdm-qt5-3-0< 1.8.4-0ubuntu1UNKNOWN
Ubuntu13.10noarchliblightdm-qt5-3-dev< 1.8.4-0ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.10	noarch	lightdm	< 1.8.4-0ubuntu1	UNKNOWN
Ubuntu	13.10	noarch	gir1.2-lightdm-1	< 1.8.4-0ubuntu1	UNKNOWN
Ubuntu	13.10	noarch	liblightdm-gobject-1-0	< 1.8.4-0ubuntu1	UNKNOWN
Ubuntu	13.10	noarch	liblightdm-gobject-1-dev	< 1.8.4-0ubuntu1	UNKNOWN
Ubuntu	13.10	noarch	liblightdm-qt-3-0	< 1.8.4-0ubuntu1	UNKNOWN
Ubuntu	13.10	noarch	liblightdm-qt-dev	< 1.8.4-0ubuntu1	UNKNOWN
Ubuntu	13.10	noarch	liblightdm-qt5-3-0	< 1.8.4-0ubuntu1	UNKNOWN
Ubuntu	13.10	noarch	liblightdm-qt5-3-dev	< 1.8.4-0ubuntu1	UNKNOWN