PT-2019-6664

CVE-2011-3349

Publicado

2019-11-19

Atualizado

2024-06-15

Descrição por

CVSS 3.1

7.8

Alta

MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions lightdm versions prior to 0.9.6

Description The issue allows a local user to potentially escalate privileges by overwriting root-owned files via a symlink. This is possible because lightdm writes in .dmrc and Xauthority files using root permissions while the files are in user-controlled folders.

Recommendations For versions prior to 0.9.6, update to version 0.9.6 or later to resolve the issue.

Explorabilidade

Correção

Impactos

Pesquisadores

Sebastian Krahmer

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-269: Improper Privilege Management

Identificadores relacionados

CVE-2011-3349