CVE-2013-4459

LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account.

Affected Software

Name	Vendor	Start Version	End Version
Lightdm	Robert_ancell	1.7.5 (including)	1.7.5 (including)
Lightdm	Robert_ancell	1.7.6 (including)	1.7.6 (including)
Lightdm	Robert_ancell	1.7.7 (including)	1.7.7 (including)
Lightdm	Robert_ancell	1.7.8 (including)	1.7.8 (including)
Lightdm	Robert_ancell	1.7.9 (including)	1.7.9 (including)
Lightdm	Robert_ancell	1.7.10 (including)	1.7.10 (including)
Lightdm	Robert_ancell	1.7.11 (including)	1.7.11 (including)
Lightdm	Robert_ancell	1.7.12 (including)	1.7.12 (including)
Lightdm	Robert_ancell	1.7.13 (including)	1.7.13 (including)
Lightdm	Robert_ancell	1.7.14 (including)	1.7.14 (including)
Lightdm	Robert_ancell	1.7.15 (including)	1.7.15 (including)
Lightdm	Robert_ancell	1.7.16 (including)	1.7.16 (including)
Lightdm	Robert_ancell	1.7.17 (including)	1.7.17 (including)
Lightdm	Robert_ancell	1.7.18 (including)	1.7.18 (including)
Lightdm	Robert_ancell	1.8.0 (including)	1.8.0 (including)
Lightdm	Robert_ancell	1.8.1 (including)	1.8.1 (including)
Lightdm	Robert_ancell	1.8.2 (including)	1.8.2 (including)
Lightdm	Robert_ancell	1.8.3 (including)	1.8.3 (including)
Lightdm	Robert_ancell	1.9.0 (including)	1.9.0 (including)
Lightdm	Robert_ancell	1.9.1 (including)	1.9.1 (including)
Lightdm	Ubuntu	devel	*
Lightdm	Ubuntu	saucy	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2013-4459
CWE	https://cwe.mitre.org/data/definitions/264.html

Affected Software

References