« Volver al listado

CVE-2013-4331

Estado: ModificadaBaja (2.1)—

Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Robert Ancell — Lightdm

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-4331",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-02-02T00:55:04.460",
  "references": [
    {
      "url": "https://bugs.launchpad.net/lightdm/%2Bbug/685212",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugs.launchpad.net/lightdm/%2Bbug/685212",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file."
    },
    {
      "lang": "es",
      "value": "Light Display Manager (también conocido como LightDM) 1.4.x anterior a 1.4.3, 1.6.x anterior a 1.6.2, y 1.7.x anterior a 1.7.14 utiliza los permisos 0664 para el archivo .Xauthority temporal, lo cual permite a usuarios locales obtener información sensible mediante la lectura del archivo."
    }
  ],
  "lastModified": "2026-06-16T23:57:02.560",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "613F7469-C0D0-41E6-A472-EE44EA6CF504"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF692EA6-5195-4D31-AF3B-F94FB9A3A9A1"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DC91FA84-1EF6-4DEC-8354-D391477DBC5A"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4ED4BFE5-0909-4A79-96D5-90859698A53B"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "110B199B-A1E2-4116-B71B-83C7C4860835"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "29C06D9D-B3EE-4CF6-9E0F-E498E9A9BF18"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3B1FC0C8-3FCB-4496-A9CA-9212E087DEF5"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.7.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE305049-F709-4403-8911-D10CC8FFB304"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.7.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2389FC2F-1C02-4B5C-8D73-64FF293B21F7"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.7.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "75438682-AD4A-4C11-A24C-78022CE26538"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.7.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F7FD9C8-C61D-4902-B592-938D1A17F04B"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.7.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A22930A-13A0-4722-8C3D-14CC53DCAF3B"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.7.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "969C4962-D760-482F-85E2-76DA424CFFB3"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.7.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F6416C0-33CA-4C4B-9BC7-0EF7A55DC465"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.7.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9618999D-5E24-45AA-9C3E-6B49F751263C"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.7.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AEB6E3B7-1683-40F3-9F1E-04D16B8E836A"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.7.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0A466891-DBC7-4EDD-B387-8D034C58DFAF"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.7.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9E83831-BEB3-4B4E-9CE3-AE06F1AB9633"
            },
            {
              "criteria": "cpe:2.3:a:robert_ancell:lightdm:1.7.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "59E6D651-CBA2-4C07-9DA2-5E7B512AAF39"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}