CVE-2011-3349

lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders

published November 19, 2019

CVSS
—
EPSS
0%
Percentile
28.7
In the wild
Unconfirmed
What it is

lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00363 · 28.7th percentile
Published
2019-11-19T21:42Z
EPSS history
Timeline
  • 19 NOV 21:42Z
    lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders
    cvelistv5