CVE-2011-3153

CVE-2011-3153 affects LightDM (Light Display Manager). The vulnerability is in dmrc.c and allows local users to read arbitrary files via a symlink attack on ~/.dmrc, valid for LightDM versions before 1.1.1. Impact is local confidentiality exposure; no remote access required. OpenSUSE and SUSE adv...

CVE-2011-3153: Improper Link Resolution Before File Access

dmrc.c in Light Display Manager aka LightDM before 1.1.1 allows local users to read arbitrary files via a symlink attack on /.dmrc...

PT-2014-2136

Name of the Vulnerable Software and Affected Versions Light Display Manager LightDM versions prior to 1.1.1 Description The issue allows local users to read arbitrary files via a symlink attack on the /.dmrc file. This is due to a flaw in the dmrc.c component of LightDM. Recommendations For...

Fedora Update for lightdm-gtk FEDORA-2014-1648

Check for the Version of lightdm-gtk OpenVAS Vulnerability Test Fedora Update for lightdm-gtk FEDORA-2014-1648 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for lightdm-gtk FEDORA-2014-1647

Check for the Version of lightdm-gtk OpenVAS Vulnerability Test Fedora Update for lightdm-gtk FEDORA-2014-1647 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for lightdm-gtk FEDORA-2014-1648

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for lightdm-gtk FEDORA-2014-1647

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : lightdm-gtk-1.6.1-3.fc19 (2014-1648)

Fix potential denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 20 : lightdm-gtk-1.6.1-3.fc20 (2014-1647)

Fix potential denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

[SECURITY] Fedora 19 Update: lightdm-gtk-1.6.1-3.fc19

A LightDM greeter that uses the GTK+ toolkit...

[SECURITY] Fedora 20 Update: lightdm-gtk-1.6.1-3.fc20

A LightDM greeter that uses the GTK+ toolkit...

CVE-2013-4331: Undefined Security Weakness

Light Display Manager aka LightDM 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file...

CVE-2013-4331

CVE-2013-4331 affects LightDM (Light Display Manager) versions 1.4.x up to 1.4.3, 1.6.x up to 1.6.2, and 1.7.x up to 1.7.14. The issue is that the temporary .Xauthority file uses 0664 permissions, enabling local users to read it and obtain sensitive information. Reported in multiple sources (e.g....

CVE-2013-4331

Light Display Manager aka LightDM 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file...

MGASA-2014-0026 Updated lightdm-gtk-greeter fixes CVE-2014-0979

Updated lightdm-gtk-greeter package fixes security vulnerability: lightdm-gtk-greeter uses the lightdm-gobject API incorrectly and does not handle lightdmgreetergetauthenticationuser returning NULL when the username of the previous authentication is invalid resulting in a NULL pointer dereference...

Updated lightdm-gtk-greeter fixes CVE-2014-0979

Updated lightdm-gtk-greeter package fixes security vulnerability: lightdm-gtk-greeter uses the lightdm-gobject API incorrectly and does not handle lightdmgreetergetauthenticationuser returning NULL when the username of the previous authentication is invalid resulting in a NULL pointer dereference...

CVE-2014-0979

The startauthentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value from the lightdmgreetergetauthenticationuser function, which allows local users to cause a denial of service NULL pointer dereference via an empty username...

CVE-2014-0979

The startauthentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value from the lightdmgreetergetauthenticationuser function, which allows local users to cause a denial of service NULL pointer dereference via an empty username...

DEBIAN-CVE-2014-0979

The startauthentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value from the lightdmgreetergetauthenticationuser function, which allows local users to cause a denial of service NULL pointer dereference via an empty username...

Null pointer dereference

The startauthentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value from the lightdmgreetergetauthenticationuser function, which allows local users to cause a denial of service NULL pointer dereference via an empty username...