CVE-2013-4459
EUVD-2013-432923.11.2013, 18:55
LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| robert_ancell | lightdm | 1.7.5 |
| robert_ancell | lightdm | 1.7.6 |
| robert_ancell | lightdm | 1.7.7 |
| robert_ancell | lightdm | 1.7.8 |
| robert_ancell | lightdm | 1.7.9 |
| robert_ancell | lightdm | 1.7.10 |
| robert_ancell | lightdm | 1.7.11 |
| robert_ancell | lightdm | 1.7.12 |
| robert_ancell | lightdm | 1.7.13 |
| robert_ancell | lightdm | 1.7.14 |
| robert_ancell | lightdm | 1.7.15 |
| robert_ancell | lightdm | 1.7.16 |
| robert_ancell | lightdm | 1.7.17 |
| robert_ancell | lightdm | 1.7.18 |
| robert_ancell | lightdm | 1.8.0 |
| robert_ancell | lightdm | 1.8.1 |
| robert_ancell | lightdm | 1.8.2 |
| robert_ancell | lightdm | 1.8.3 |
| robert_ancell | lightdm | 1.9.0 |
| robert_ancell | lightdm | 1.9.1 |
| canonical | ubuntu_linux | 13.10 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References