Unscored CVE-2013-4459 EUVD-2013-4329GHSA-wqp2-x23v-m2mf

LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to by…

Published Nov 23, 2013 · Updated Aug 6, 2024 · Assigned by redhat

Description

LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account.

References

USN-2012-1 vendor-advisory
https://bugs.launchpad.net/ubuntu/%2Bsource/lightdm/%2Bbug/1243339
[LightDM] 20131030 lightdm 1.9.2 released mailing-list
[LightDM] 20131031 lightdm 1.8.4 released mailing-list