CVE-2011-3349: High severity Lightdm Project Lightdm vulnerability
Published Nov 19, 2019
·Updated
lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation.
Affected Software
2 affected componentsFixes available
Lightdm Project Lightdm<0.9.6
debian/lightdm
1.26.0-71.26.0-81.32.0-61.32.0-7
Event History
Nov 19, 2019
CVE Published
via MITRE·09:42 PM
Data Sourced
via MITRE·09:42 PM
DescriptionWeakness
Feb 18, 2026
Data Sourced
via Debian·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-3349?
CVE-2011-3349 has a medium severity rating, due to its potential for local privilege escalation.
2
How do I fix CVE-2011-3349?
To fix CVE-2011-3349, update LightDM to version 0.9.6 or above.
3
Who is affected by CVE-2011-3349?
CVE-2011-3349 affects local users of LightDM versions prior to 0.9.6 on Debian systems.
4
What type of vulnerability is CVE-2011-3349?
CVE-2011-3349 is a local privilege escalation vulnerability affecting the LightDM display manager.
5
Can CVE-2011-3349 be exploited remotely?
No, CVE-2011-3349 can only be exploited locally by authenticated users.