high7.3Public exploit code
CVE-2017-7358
In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path locations and escalate…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LightDM (Ubuntu 16.04/16.10) - 'Guest Account' Local Privilege Escalation2017-04-25 · local · linux
Impact
In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path locations and escalate privileges to root when the guest user logs out.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lightdm Project | Lightdm | through 1.22.0 |
| Canonical | Ubuntu Linux | Versions 16.04, 16.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://bazaar.launchpad.net/~lightdm-team/lightdm/trunk/revision/2478
- http://www.securityfocus.com/bid/97486
- https://launchpad.net/bugs/1677924
- https://lists.freedesktop.org/archives/lightdm/2017-April/001059.html
- https://www.exploit-db.com/exploits/41923/
- https://www.ubuntu.com/usn/usn-3255-1/
- http://bazaar.launchpad.net/~lightdm-team/lightdm/trunk/revision/2478
- http://www.securityfocus.com/bid/97486
- https://launchpad.net/bugs/1677924
- https://lists.freedesktop.org/archives/lightdm/2017-April/001059.html
- https://www.exploit-db.com/exploits/41923/
- https://www.ubuntu.com/usn/usn-3255-1/