CVE-2013-4331 Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensiti...
LowCVSS 2.1
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/lightdm(Debian:12) | < 1.6.2-1 | 1.6.2-1 |
| debian/lightdm(Debian:13) | < 1.6.2-1 | 1.6.2-1 |
| debian/lightdm(Debian:14) | < 1.6.2-1 | 1.6.2-1 |
| robert ancell lightdm | = 1.4.0 | No fix listed |
| robert ancell lightdm | = 1.4.1 | No fix listed |
| robert ancell lightdm | = 1.4.2 | No fix listed |
| robert ancell lightdm | = 1.6.0 | No fix listed |
| robert ancell lightdm | = 1.6.1 | No fix listed |
| robert ancell lightdm | = 1.7.0 | No fix listed |
| robert ancell lightdm | = 1.7.1 | No fix listed |
| robert ancell lightdm | = 1.7.2 | No fix listed |
| robert ancell lightdm | = 1.7.3 | No fix listed |
| robert ancell lightdm | = 1.7.4 | No fix listed |
| robert ancell lightdm | = 1.7.5 | No fix listed |
| robert ancell lightdm | = 1.7.6 | No fix listed |
| robert ancell lightdm | = 1.7.7 | No fix listed |
| robert ancell lightdm | = 1.7.8 | No fix listed |
| robert ancell lightdm | = 1.7.9 | No fix listed |
| robert ancell lightdm | = 1.7.10 | No fix listed |
| robert ancell lightdm | = 1.7.11 | No fix listed |
| robert ancell lightdm | = 1.7.12 | No fix listed |
| robert ancell lightdm | = 1.7.13 | No fix listed |
References
- Debian Security Tracker CVE-2013-4331 vendor-advisory
- bugs.launchpad.net
- bugs.debian.org issue-tracking