Vulnerability in Robert Ancell Lightdm

CVE-2013-4459

LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account.

EPSS: 0.004 (35.9th percentile) — read the EPSS interpretation.

Affected products

Robert_ancell Lightdm — versions 1.7.5, 1.7.6, 1.7.7
Canonical Ubuntu_linux — versions 13.10
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory)
secalert@redhat.com (Exploit, x_refsource_MISC)
secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (mailing-list, x_refsource_MLIST)