Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
The Date and Time Indicator would allow unintended access.
Software Description:
- indicator-datetime: Simple clock
Details:
It was discovered that the Date and Time Indicator incorrectly allowed
Evolution to be opened at the greeter screen. An attacker could use this
issue to possibly gain unexpected access to applications such as a web
browser with privileges of the greeter user.
The problem can be corrected by updating your system to the following package versions: Ubuntu 13.10: indicator-datetime 13.10.0+13.10.20131023.2-0ubuntu1.1 After a standard system update you need to reboot your computer to make all the necessary changes.
https://ubuntu.com/security/notices/USN-2186-1
CVE-2013-7374
Get the latest Linux and open source security news straight to your inbox.