CVE-2013-4459

Publication date 25 October 2013

Last updated 24 July 2024


Ubuntu priority

LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account.

Read the notes from the security team

Status

Package Ubuntu Release Status
lightdm 13.10 saucy
Fixed 1.8.4-0ubuntu1
13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
10.04 LTS lucid Not in release

Notes


mdeslaur

only 1.8+

References

Related Ubuntu Security Notices (USN)

    • USN-2012-1
    • Light Display Manager vulnerability
    • 6 November 2013

Other references