CVE-2011-4105 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	1.9 UNKNOWN	LOCAL	MEDIUM		AV:L/AC:M/Au:N/C:N/I:P/A:N
redhat	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 13%

Vendor	Product	Version
robert_ancell	lightdm	𝑥 ≤ 1.0.5
robert_ancell	lightdm	0.0.1
robert_ancell	lightdm	0.0.2
robert_ancell	lightdm	0.0.3
robert_ancell	lightdm	0.0.4
robert_ancell	lightdm	0.1.0
robert_ancell	lightdm	0.1.1
robert_ancell	lightdm	0.1.2
robert_ancell	lightdm	0.2.0
robert_ancell	lightdm	0.2.1
robert_ancell	lightdm	0.2.2
robert_ancell	lightdm	0.2.3
robert_ancell	lightdm	0.3.0
robert_ancell	lightdm	0.3.1
robert_ancell	lightdm	0.3.2
robert_ancell	lightdm	0.3.3
robert_ancell	lightdm	0.3.4
robert_ancell	lightdm	0.3.5
robert_ancell	lightdm	0.3.6
robert_ancell	lightdm	0.4.0
robert_ancell	lightdm	0.4.1
robert_ancell	lightdm	0.4.2
robert_ancell	lightdm	0.4.3
robert_ancell	lightdm	0.4.4
robert_ancell	lightdm	0.9.0
robert_ancell	lightdm	0.9.1
robert_ancell	lightdm	0.9.2
robert_ancell	lightdm	0.9.3
robert_ancell	lightdm	0.9.4
robert_ancell	lightdm	0.9.5
robert_ancell	lightdm	0.9.6
robert_ancell	lightdm	0.9.7
robert_ancell	lightdm	0.9.8
robert_ancell	lightdm	1.0.0
robert_ancell	lightdm	1.0.1
robert_ancell	lightdm	1.0.2
robert_ancell	lightdm	1.0.3
robert_ancell	lightdm	1.0.4
robert_ancell	lightdm	1.1.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

lightdm

bullseye	1.26.0-7 fixed
bookworm	1.26.0-8 fixed
sid	1.32.0-6 fixed
trixie	1.32.0-6 fixed

Ubuntu Releases

Ubuntu Product

Codename

lightdm

quantal	Fixed 1.0.6-0ubuntu3 released
precise	Fixed 1.0.6-0ubuntu3 released
oneiric	Fixed 1.0.6-0ubuntu1.1 released
natty	ignored
maverick	dne
lucid	dne
hardy	dne

Common Weakness Enumeration

CWE-59 - Improper Link Resolution Before File Access ('Link Following')
The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References

http://lists.freedesktop.org/archives/lightdm/2011-November/000178.html

http://www.openwall.com/lists/oss-security/2011/11/02/10

http://www.openwall.com/lists/oss-security/2011/11/02/6

http://www.openwall.com/lists/oss-security/2011/11/02/9

http://www.ubuntu.com/usn/USN-1262-1

http://lists.freedesktop.org/archives/lightdm/2011-November/000178.html

http://www.openwall.com/lists/oss-security/2011/11/02/10

http://www.openwall.com/lists/oss-security/2011/11/02/6

http://www.openwall.com/lists/oss-security/2011/11/02/9

http://www.ubuntu.com/usn/USN-1262-1