Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Ubuntu 11.10: USN-1399-2 Moderate: Light Display Manager File Deletion

ubuntu
Calendar Grey March 13, 2012
Scroller Ubuntu
The recently identified flaw in Light Display Manager enables unprivileged users to erase files on Ubuntu platforms. It's advised to apply updates for enhanced security.
Light Display Manager could be made to delete files as the administrator.

Summary

Light Display Manager could be made to delete files as the administrator.

Software Description:

- lightdm: Display Manager

Details:

Ryan Lortie discovered that a guest session script bundled in the Light

Display Manager package improperly cleaned out certain guest session files.

A local attacker could use this issue to delete arbitrary files.

Topics%20covered

Topics Covered

security advisory moderate local attack ubuntu file deletion light display manager guest session

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  lightdm                         1.0.6-0ubuntu1.6

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1399-2

https://ubuntu.com/security/notices/USN-1399-1

CVE-2012-0943

Severity
important
Lowest
Low
Medium
High
Critical

March 13, 2012

Topics%20covered

Topics Covered

security advisory moderate local attack ubuntu file deletion light display manager guest session

Package Information

https://launchpad.net/ubuntu/+source/lightdm/1.0.6-0ubuntu1.6

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.