CVE-2013-4331
published 2014-02-02CVE-2013-4331: Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file…
PriorityP45low2.1CVSS 2.0
AVLACLAuNCPINAN
EPSS
0.37%
28.7th percentile
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file.
Affected
24 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | lightdm | < lightdm 1.6.2-1 (bookworm) | lightdm 1.6.2-1 (bookworm) |
| lightdm_project | lightdm | >= 0 < 1.6.2-1 | 1.6.2-1 |
| lightdm_project | lightdm | >= 0 < 1.6.2-1 | 1.6.2-1 |
| lightdm_project | lightdm | >= 0 < 1.6.2-1 | 1.6.2-1 |
| lightdm_project | lightdm | >= 0 < 1.6.2-1 | 1.6.2-1 |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
| robert_ancell | lightdm | — | — |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv2.1LOW
vendor_debian2.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Light Display Manager vulnerability
vendor_ubuntu·2013-09-12
CVE-2013-4331 Light Display Manager vulnerability
Title: Light Display Manager vulnerability
Summary: Light Display Manager could be made to expose sensitive information.
It was discovered that Light Display Manager created .Xauthority files with
incorrect permissions. A local attacker could use this flaw to bypass
access restrictions.
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
Debian
CVE-2013-4331: lightdm - Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and ...
vendor_debian·2013·CVSS 2.1
CVE-2013-4331 [LOW] CVE-2013-4331: lightdm - Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and ...
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file.
Scope: local
bookworm: resolved (fixed in 1.6.2-1)
bullseye: resolved (fixed in 1.6.2-1)
forky: resolved (fixed in 1.6.2-1)
sid: resolved (fixed in 1.6.2-1)
trixie: resolved (fixed in 1.6.2-1)
GHSA
GHSA-p375-56p4-h24r: Light Display Manager (aka LightDM) 1
ghsa_unreviewed·2022-05-17
CVE-2013-4331 [LOW] GHSA-p375-56p4-h24r: Light Display Manager (aka LightDM) 1
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file.
OSV
CVE-2013-4331: Light Display Manager (aka LightDM) 1
osv·2014-02-02·CVSS 2.1
CVE-2013-4331 [LOW] CVE-2013-4331: Light Display Manager (aka LightDM) 1
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file.
No detection rules found.
No public exploits indexed.
2014-02-02
Published