Lucene search

K
mageiaGentoo FoundationMGASA-2013-0286
HistorySep 19, 2013 - 1:46 p.m.

Updated lightdm package fixes security vulnerability

2013-09-1913:46:09
Gentoo Foundation
advisories.mageia.org
8

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

lightdm before 1.4.3, 1.6.2 and 1.7.14 created .Xauthority files with world-readable permissions (CVE-2013-4331). Additionally, an issue where a user logged into a graphical desktop environment through lightdm would lose privleges to local devices (such as the sound card) when using the ‘su’ command has been fixed.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchlightdm< 1.4.3-1lightdm-1.4.3-1.mga3

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%