CVE-2011-3153: Low severity Canonical Ubuntu Linux vulnerability
Published Mar 6, 2014
·Updated
dmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary files via a symlink attack on ~/.dmrc.
Affected Software
45 affected components
Canonical Ubuntu Linux=11.10
Robert Ancell Lightdm=0.1.0
Robert Ancell Lightdm=0.0.1
Robert Ancell Lightdm=0.3.5
Robert Ancell Lightdm=1.0.11
Robert Ancell Lightdm=0.9.6
Robert Ancell Lightdm=0.0.2
Robert Ancell Lightdm=0.2.0
Robert Ancell Lightdm=0.0.4
Robert Ancell Lightdm=0.1.1
Robert Ancell Lightdm=0.3.0
Robert Ancell Lightdm=0.4.1
Robert Ancell Lightdm=1.0.4
Robert Ancell Lightdm=0.9.8
Robert Ancell Lightdm=0.9.1
Robert Ancell Lightdm=0.4.0
Robert Ancell Lightdm=1.0.1
Robert Ancell Lightdm=1.0.2
Robert Ancell Lightdm=0.3.2
Robert Ancell Lightdm<=1.1.0
Robert Ancell Lightdm=0.2.1
Robert Ancell Lightdm=0.3.4
Robert Ancell Lightdm=1.0.8
Robert Ancell Lightdm=0.9.5
Robert Ancell Lightdm=1.0.0
Robert Ancell Lightdm=0.9.0
Robert Ancell Lightdm=0.4.2
Robert Ancell Lightdm=0.2.3
Robert Ancell Lightdm=1.0.10
Robert Ancell Lightdm=0.9.7
Robert Ancell Lightdm=1.0.9
Robert Ancell Lightdm=0.9.4
Robert Ancell Lightdm=0.4.3
Robert Ancell Lightdm=0.9.3
Robert Ancell Lightdm=1.0.3
Robert Ancell Lightdm=0.3.1
Robert Ancell Lightdm=0.1.2
Robert Ancell Lightdm=0.3.6
Robert Ancell Lightdm=1.0.6
Robert Ancell Lightdm=0.3.3
Robert Ancell Lightdm=0.2.2
Robert Ancell Lightdm=0.4.4
Robert Ancell Lightdm=0.0.3
Robert Ancell Lightdm=1.0.5
Robert Ancell Lightdm=0.9.2
Event History
Mar 6, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-3153?
CVE-2011-3153 has a medium severity rating due to its potential to allow unauthorized access to read arbitrary files.
2
How do I fix CVE-2011-3153?
To fix CVE-2011-3153, upgrade Light Display Manager to version 1.1.1 or later.
3
Who is affected by CVE-2011-3153?
CVE-2011-3153 affects local users of LightDM versions prior to 1.1.1, particularly on Ubuntu 11.10.
4
What type of attack is associated with CVE-2011-3153?
CVE-2011-3153 is associated with a symlink attack that exploits file access permissions.
5
When was CVE-2011-3153 discovered?
CVE-2011-3153 was publicly disclosed in August 2011.