CVE-2013-4459: Low severity lightdm vulnerability
Published Nov 23, 2013
·Updated
LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account.
Affected Software
21 affected components
Robert Ancell Lightdm=1.7.5
Robert Ancell Lightdm=1.7.6
Robert Ancell Lightdm=1.7.7
Robert Ancell Lightdm=1.7.8
Robert Ancell Lightdm=1.7.9
Robert Ancell Lightdm=1.7.10
Robert Ancell Lightdm=1.7.11
Robert Ancell Lightdm=1.7.12
Robert Ancell Lightdm=1.7.13
Robert Ancell Lightdm=1.7.14
Robert Ancell Lightdm=1.7.15
Robert Ancell Lightdm=1.7.16
Robert Ancell Lightdm=1.7.17
Robert Ancell Lightdm=1.7.18
Robert Ancell Lightdm=1.8.0
Robert Ancell Lightdm=1.8.1
Robert Ancell Lightdm=1.8.2
Robert Ancell Lightdm=1.8.3
Robert Ancell Lightdm=1.9.0
Robert Ancell Lightdm=1.9.1
Canonical Ubuntu Linux=13.10
Event History
Nov 23, 2013
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4459?
CVE-2013-4459 is considered a medium severity vulnerability due to its potential to bypass AppArmor restrictions.
2
How do I fix CVE-2013-4459?
To fix CVE-2013-4459, upgrade LightDM to version 1.9.2 or later.
3
Who is affected by CVE-2013-4459?
CVE-2013-4459 affects users of LightDM versions 1.7.5 through 1.9.1.
4
What does CVE-2013-4459 allow an attacker to do?
CVE-2013-4459 allows local users to bypass intended restrictions by leveraging the Guest account.
5
Is there a workaround for CVE-2013-4459?
A workaround for CVE-2013-4459 involves disabling the Guest account if immediate upgrading is not feasible.