CVE-2012-0943

Published: May 22, 2014Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

debian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT per ADT1/ADT2 due to different codebases and affected versions. CVE-2012-6648 has been assigned for the gdm-guest-session issue.

Affected (14)

Products: Canonical: Ubuntu Linux · Robert Ancell: Lightdm

1 product

1 product

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 11.10
Robert Ancell Lightdm	Version 1.0.0
Robert Ancell Lightdm	Version 1.0.1
Robert Ancell Lightdm	Version 1.0.2
Robert Ancell Lightdm	Version 1.0.3
Robert Ancell Lightdm	Version 1.0.4
Robert Ancell Lightdm	Version 1.0.5
Robert Ancell Lightdm	Version 1.1.0
Robert Ancell Lightdm	Version 1.1.1
Robert Ancell Lightdm	Version 1.1.2
Robert Ancell Lightdm	Version 1.1.3
Robert Ancell Lightdm	Version 1.1.4
Robert Ancell Lightdm	Version 1.1.5
Robert Ancell Lightdm	Version 1.1.6