Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Ubuntu 13.10 USN-2012-1 Critical: Light Display Manager Local Threat

ubuntu
Calendar Grey November 6, 2013
Scroller Ubuntu
An issue within the Screen Control Interface might leak critical data locally in Ubuntu 13.10.
Light Display Manager could be made to expose sensitive information locally.

Summary

Light Display Manager could be made to expose sensitive information

locally.

Software Description:

- lightdm: Display Manager

Details:

Christian Prim discovered that Light Display Manager incorrectly applied

the AppArmor security profile when the Guest account is used. A local

attacker could use this issue to possibly gain access to sensitive

information.

Topics%20covered

Topics Covered

security advisory local threat information exposure ubuntu lightdm

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.10:
  lightdm                         1.8.4-0ubuntu1

This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to reboot your computer to
make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2012-1

CVE-2013-4459

Severity
critical
Lowest
Low
Medium
High
Critical

November 06, 2013

Topics%20covered

Topics Covered

security advisory local threat information exposure ubuntu lightdm

Package Information

https://launchpad.net/ubuntu/+source/lightdm/1.8.4-0ubuntu1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.