Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 13.04 USN-1950-1 Moderate: Light Display Manager Access Control

ubuntu
Calendar Grey September 12, 2013
Scroller Ubuntu
Ubuntu Security Notice USN-2050-2 addresses a critical issue in gnome-shell. Essential patch released for affected users.
Light Display Manager could be made to expose sensitive information.

Summary

Light Display Manager could be made to expose sensitive information.

Software Description:

- lightdm: Display Manager

Details:

It was discovered that Light Display Manager created .Xauthority files with

incorrect permissions. A local attacker could use this flaw to bypass

access restrictions.

Topics%20covered

Topics Covered

security advisory access control information exposure ubuntu light display manager

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.04:
  lightdm                         1.6.0-0ubuntu3.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

CVE-2013-4331

September 12, 2013

Topics%20covered

Topics Covered

security advisory access control information exposure ubuntu light display manager

Package Information

https://launchpad.net/ubuntu/+source/lightdm/1.6.0-0ubuntu3.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.