Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-4331
HistorySep 12, 2013 - 12:00 a.m.

CVE-2013-4331

2013-09-1200:00:00
ubuntu.com
ubuntu.com
5

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2,
and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority
file, which allows local users to obtain sensitive information by reading
the file.

Bugs

Notes

Author Note
mdeslaur couldn’t reproduce on quantal
OSVersionArchitecturePackageVersionFilename
ubuntu13.04noarchlightdm< 1.6.0-0ubuntu3.1UNKNOWN

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%