CVE-2013-7374

Published: May 1, 2014Modified: May 6, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date.

Affected (1)

Products: Canonical: Ubuntu Linux

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 13.10

Related CWEs

References (10)

http://bazaar.launchpad.net/~indicator-applet-developers/indicator-datetime/trunk.13.10/revision/282

Source: security@ubuntu.com

http://www.openwall.com/lists/oss-security/2014/04/29/3

Source: security@ubuntu.com

http://www.openwall.com/lists/oss-security/2014/04/30/1

Source: security@ubuntu.com

http://www.ubuntu.com/usn/USN-2186-1

Source: security@ubuntu.com

Vendor Advisory

https://bugs.launchpad.net/ubuntu/%2Bsource/indicator-datetime/%2Bbug/1246812

Source: security@ubuntu.com

http://bazaar.launchpad.net/~indicator-applet-developers/indicator-datetime/trunk.13.10/revision/282

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2014/04/29/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2014/04/30/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2186-1

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugs.launchpad.net/ubuntu/%2Bsource/indicator-datetime/%2Bbug/1246812

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.