CVE-2013-4459
First published: Sat Nov 23 2013(Updated: )
LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| LightDM | =1.7.5 | |
| LightDM | =1.7.6 | |
| LightDM | =1.7.7 | |
| LightDM | =1.7.8 | |
| LightDM | =1.7.9 | |
| LightDM | =1.7.10 | |
| LightDM | =1.7.11 | |
| LightDM | =1.7.12 | |
| LightDM | =1.7.13 | |
| LightDM | =1.7.14 | |
| LightDM | =1.7.15 | |
| LightDM | =1.7.16 | |
| LightDM | =1.7.17 | |
| LightDM | =1.7.18 | |
| LightDM | =1.8.0 | |
| LightDM | =1.8.1 | |
| LightDM | =1.8.2 | |
| LightDM | =1.8.3 | |
| LightDM | =1.9.0 | |
| LightDM | =1.9.1 | |
| Ubuntu | =13.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-4459?
CVE-2013-4459 is considered a medium severity vulnerability due to its potential to bypass AppArmor restrictions.
How do I fix CVE-2013-4459?
To fix CVE-2013-4459, upgrade LightDM to version 1.9.2 or later.
Who is affected by CVE-2013-4459?
CVE-2013-4459 affects users of LightDM versions 1.7.5 through 1.9.1.
What does CVE-2013-4459 allow an attacker to do?
CVE-2013-4459 allows local users to bypass intended restrictions by leveraging the Guest account.
Is there a workaround for CVE-2013-4459?
A workaround for CVE-2013-4459 involves disabling the Guest account if immediate upgrading is not feasible.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/author
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/robert ancell
- canonical/lightdm
- version/lightdm/1.7.5
- version/lightdm/1.7.6
- version/lightdm/1.7.7
- version/lightdm/1.7.8
- version/lightdm/1.7.9
- version/lightdm/1.7.10
- version/lightdm/1.7.11
- version/lightdm/1.7.12
- version/lightdm/1.7.13
- version/lightdm/1.7.14
- version/lightdm/1.7.15
- version/lightdm/1.7.16
- version/lightdm/1.7.17
- version/lightdm/1.7.18
- version/lightdm/1.8.0
- version/lightdm/1.8.1
- version/lightdm/1.8.2
- version/lightdm/1.8.3
- version/lightdm/1.9.0
- version/lightdm/1.9.1
- vendor/canonical
- canonical/ubuntu
- version/ubuntu/13.10