CVE-2011-4105: Low severity lightdm vulnerability
Published Feb 17, 2012
·Updated
LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on ~/.Xauthority.
Affected Software
39 affected components
Robert Ancell Lightdm<=1.0.5
Robert Ancell Lightdm=0.0.1
Robert Ancell Lightdm=0.0.2
Robert Ancell Lightdm=0.0.3
Robert Ancell Lightdm=0.0.4
Robert Ancell Lightdm=0.1.0
Robert Ancell Lightdm=0.1.1
Robert Ancell Lightdm=0.1.2
Robert Ancell Lightdm=0.2.0
Robert Ancell Lightdm=0.2.1
Robert Ancell Lightdm=0.2.2
Robert Ancell Lightdm=0.2.3
Robert Ancell Lightdm=0.3.0
Robert Ancell Lightdm=0.3.1
Robert Ancell Lightdm=0.3.2
Robert Ancell Lightdm=0.3.3
Robert Ancell Lightdm=0.3.4
Robert Ancell Lightdm=0.3.5
Robert Ancell Lightdm=0.3.6
Robert Ancell Lightdm=0.4.0
Robert Ancell Lightdm=0.4.1
Robert Ancell Lightdm=0.4.2
Robert Ancell Lightdm=0.4.3
Robert Ancell Lightdm=0.4.4
Robert Ancell Lightdm=0.9.0
Robert Ancell Lightdm=0.9.1
Robert Ancell Lightdm=0.9.2
Robert Ancell Lightdm=0.9.3
Robert Ancell Lightdm=0.9.4
Robert Ancell Lightdm=0.9.5
Robert Ancell Lightdm=0.9.6
Robert Ancell Lightdm=0.9.7
Robert Ancell Lightdm=0.9.8
Robert Ancell Lightdm=1.0.0
Robert Ancell Lightdm=1.0.1
Robert Ancell Lightdm=1.0.2
Robert Ancell Lightdm=1.0.3
Robert Ancell Lightdm=1.0.4
Robert Ancell Lightdm=1.1.0
Event History
Feb 17, 2012
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4105?
CVE-2011-4105 is rated as a high severity vulnerability due to its potential for local users to change ownership of arbitrary files.
2
How do I fix CVE-2011-4105?
To mitigate CVE-2011-4105, you should upgrade LightDM to version 1.0.6 or later.
3
What vulnerability does CVE-2011-4105 address?
CVE-2011-4105 addresses a vulnerability in LightDM that allows local users to exploit symlink attacks on the ~/.Xauthority file.
4
Who is affected by CVE-2011-4105?
CVE-2011-4105 affects users of LightDM versions prior to 1.0.6, including various earlier versions.
5
Is CVE-2011-4105 a remote or local vulnerability?
CVE-2011-4105 is a local vulnerability that requires local user access to exploit.