CVE-2013-4331

Published: Feb 2, 2014Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file.

Affected (19)

Products: Robert Ancell: Lightdm

Robert Ancell

1 product

Lightdm

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Robert Ancell Lightdm	Version 1.4.0
Robert Ancell Lightdm	Version 1.4.1
Robert Ancell Lightdm	Version 1.4.2
Robert Ancell Lightdm	Version 1.6.0
Robert Ancell Lightdm	Version 1.6.1
Robert Ancell Lightdm	Version 1.7.0
Robert Ancell Lightdm	Version 1.7.10
Robert Ancell Lightdm	Version 1.7.11
Robert Ancell Lightdm	Version 1.7.12
Robert Ancell Lightdm	Version 1.7.13
Robert Ancell Lightdm	Version 1.7.1
Robert Ancell Lightdm	Version 1.7.2
Robert Ancell Lightdm	Version 1.7.3
Robert Ancell Lightdm	Version 1.7.4
Robert Ancell Lightdm	Version 1.7.5
Robert Ancell Lightdm	Version 1.7.6
Robert Ancell Lightdm	Version 1.7.7
Robert Ancell Lightdm	Version 1.7.8
Robert Ancell Lightdm	Version 1.7.9

Related CWEs

CWE-264

References (2)

https://bugs.launchpad.net/lightdm/%2Bbug/685212

Source: secalert@redhat.com

https://bugs.launchpad.net/lightdm/%2Bbug/685212

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.