Stay Secure with the Latest Linux Advisories

security advisorymoderatelocal attack

Ubuntu 11.10: USN-1399-2 Moderate: Light Display Manager File Deletion

Light Display Manager could be made to delete files as the administrator.. =========================================================================Ubuntu Security Notice USN-1399-2 March 13, 2012 lightdm vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 11.10 Summary: Light Display Manager could be made to delete files as the administrator. Software Description: - lightdm: Display Manager Details: Ryan Lortie discovered that a guest session script bundled in the Light Display Manager package improperly cleaned out certain guest session files. A local attacker could use this issue to delete arbitrary files. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: lightdm 1.0.6-0ubuntu1.6 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1399-2 https://ubuntu.com/security/notices/USN-1399-1 CVE-2012-0943 Package Information: https://launchpad.net/ubuntu/+source/lightdm/1.0.6-0ubuntu1.6 . The recently identified flaw in Light Display Manager enables unprivileged users to erase files on Ubuntu platforms. It's advised to apply updates for enhanced security.. Light Display Manager, Ubuntu 11.10, File Deletion. . Severity: Important. LinuxSecurity.com Team

Mar 13, 2012 •Important Ubuntu