high7.8
CVE-2011-3349
lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders.
Impact
lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lightdm Project | Lightdm | before 0.9.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/security/cve/cve-2011-3349
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=639151
- https://bugs.launchpad.net/debian/+source/lightdm/+bug/834079
- https://seclists.org/oss-sec/2011/q3/393
- https://security-tracker.debian.org/tracker/CVE-2011-3349
- https://www.securityfocus.com/bid/50506
- https://access.redhat.com/security/cve/cve-2011-3349
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=639151
- https://bugs.launchpad.net/debian/+source/lightdm/+bug/834079
- https://seclists.org/oss-sec/2011/q3/393
- https://security-tracker.debian.org/tracker/CVE-2011-3349
- https://www.securityfocus.com/bid/50506