Lightdm

lightdm

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-1111 1Robert Ancell 1Lightdm May 6, 2026 Oct 27, 2014 N/A· v4 N/A· v3 4.6 MEDIUM· v2 lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact.
CVE-2012-0943 2Canonical Robert Ancell 2Lightdm Ubuntu Linux May 6, 2026 May 22, 2014 N/A· v4 N/A· v3 2.1 LOW· v2 debian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. N...Show more debian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT per ADT1/ADT2 due to different codebases and affected versions. CVE-2012-6648 has been assigned for the gdm-guest-session issue.Show less
CVE-2011-3153 2Canonical Robert Ancell 2Lightdm Ubuntu Linux May 6, 2026 Mar 6, 2014 N/A· v4 N/A· v3 1.9 LOW· v2 dmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary files via a symlink attack on ~/.dmrc.
CVE-2013-4331 1Robert Ancell 1Lightdm Apr 29, 2026 Feb 2, 2014 N/A· v4 N/A· v3 2.1 LOW· v2 Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by re...Show more Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file.Show less
CVE-2013-4459 2Canonical Robert Ancell 2Lightdm Ubuntu Linux Apr 29, 2026 Nov 23, 2013 N/A· v4 N/A· v3 3.3 LOW· v2 LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account.
CVE-2011-4105 1Robert Ancell 1Lightdm Apr 29, 2026 Feb 17, 2012 N/A· v4 N/A· v3 1.9 LOW· v2 LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on ~/.Xauthority.