CVEvulnerability
CVE-2013-4459
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-11-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:L/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account.
Affected configurations
• robert ancell lightdm 1.7.5
• robert ancell lightdm 1.7.6
• robert ancell lightdm 1.7.7
• robert ancell lightdm 1.7.8
• robert ancell lightdm 1.7.9
• robert ancell lightdm 1.7.10
• robert ancell lightdm 1.7.11
• robert ancell lightdm 1.7.12
• robert ancell lightdm 1.7.13
• robert ancell lightdm 1.7.14
• robert ancell lightdm 1.7.15
• robert ancell lightdm 1.7.16
• robert ancell lightdm 1.7.17
• robert ancell lightdm 1.7.18
• robert ancell lightdm 1.8.0
• robert ancell lightdm 1.8.1
• robert ancell lightdm 1.8.2
• robert ancell lightdm 1.8.3
• robert ancell lightdm 1.9.0
• robert ancell lightdm 1.9.1
• canonical ubuntu linux 13.10
Related
Weakness · not in database (1)
References
- http://lists.freedesktop.org/archives/lightdm/2013-October/000471.html lists.freedesktop.org
- http://lists.freedesktop.org/archives/lightdm/2013-October/000472.html lists.freedesktop.org
- http://www.ubuntu.com/usn/USN-2012-1 www.ubuntu.com
- https://bugs.launchpad.net/ubuntu/%2Bsource/lightdm/%2Bbug/1243339 Exploit
- http://lists.freedesktop.org/archives/lightdm/2013-October/000471.html lists.freedesktop.org
- http://lists.freedesktop.org/archives/lightdm/2013-October/000472.html lists.freedesktop.org
- http://www.ubuntu.com/usn/USN-2012-1 www.ubuntu.com
- https://bugs.launchpad.net/ubuntu/%2Bsource/lightdm/%2Bbug/1243339 Exploit