CVE-2011-4105

LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on ~/.Xauthority.

Score

CVSS 2.0 1.9 Low

Status

Modified - secalert@redhat.com

Published

2012-02-17

Last modified

2024-08-07

Weaknesses

CWE-59

Affected products

• Lightdm (Robert Ancell)

References

• http://lists.freedesktop.org/archives/lightdm/2011-November/000178.html
• http://www.openwall.com/lists/oss-security/2011/11/02/10
• http://www.openwall.com/lists/oss-security/2011/11/02/6
• http://www.openwall.com/lists/oss-security/2011/11/02/9
• http://www.ubuntu.com/usn/USN-1262-1