LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on ~/.Xauthority.
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Lightdm | Robert_ancell | 0.1.0 | 0.1.0 |
Lightdm | Robert_ancell | 0.0.1 | 0.0.1 |
Lightdm | Robert_ancell | 0.3.5 | 0.3.5 |
Lightdm | Robert_ancell | 0.9.6 | 0.9.6 |
Lightdm | Robert_ancell | 0.0.2 | 0.0.2 |
Lightdm | Robert_ancell | 0.2.0 | 0.2.0 |
Lightdm | Robert_ancell | 0.0.4 | 0.0.4 |
Lightdm | Robert_ancell | 0.1.1 | 0.1.1 |
Lightdm | Robert_ancell | 0.3.0 | 0.3.0 |
Lightdm | Robert_ancell | 1.1.0 | 1.1.0 |
Lightdm | Robert_ancell | 0.4.1 | 0.4.1 |
Lightdm | Robert_ancell | 1.0.4 | 1.0.4 |
Lightdm | Robert_ancell | 0.9.8 | 0.9.8 |
Lightdm | Robert_ancell | 0.9.1 | 0.9.1 |
Lightdm | Robert_ancell | 0.4.0 | 0.4.0 |
Lightdm | Robert_ancell | 1.0.1 | 1.0.1 |
Lightdm | Robert_ancell | 1.0.2 | 1.0.2 |
Lightdm | Robert_ancell | 0.3.2 | 0.3.2 |
Lightdm | Robert_ancell | 0.2.1 | 0.2.1 |
Lightdm | Robert_ancell | 0.3.4 | 0.3.4 |
Lightdm | Robert_ancell | 0.9.5 | 0.9.5 |
Lightdm | Robert_ancell | 1.0.0 | 1.0.0 |
Lightdm | Robert_ancell | 0.9.0 | 0.9.0 |
Lightdm | Robert_ancell | 0.4.2 | 0.4.2 |
Lightdm | Robert_ancell | 0.2.3 | 0.2.3 |
Lightdm | Robert_ancell | 0.9.7 | 0.9.7 |
Lightdm | Robert_ancell | * | 1.0.5 |
Lightdm | Robert_ancell | 0.9.4 | 0.9.4 |
Lightdm | Robert_ancell | 0.4.3 | 0.4.3 |
Lightdm | Robert_ancell | 0.9.3 | 0.9.3 |
Lightdm | Robert_ancell | 1.0.3 | 1.0.3 |
Lightdm | Robert_ancell | 0.3.1 | 0.3.1 |
Lightdm | Robert_ancell | 0.1.2 | 0.1.2 |
Lightdm | Robert_ancell | 0.3.6 | 0.3.6 |
Lightdm | Robert_ancell | 0.3.3 | 0.3.3 |
Lightdm | Robert_ancell | 0.2.2 | 0.2.2 |
Lightdm | Robert_ancell | 0.4.4 | 0.4.4 |
Lightdm | Robert_ancell | 0.0.3 | 0.0.3 |
Lightdm | Robert_ancell | 0.9.2 | 0.9.2 |