CVE-2011-4105

https://notcve.org/view.php?id=CVE-2011-4105

LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on ~/.Xauthority. LightDM antes de v1.0.6 permite a usuarios locales cambiar el propietario de archivos de su elección a través de un ataque de enlaces simbólicos en ~/.Xauthority. • http://lists.freedesktop.org/archives/lightdm/2011-November/000178.html http://www.openwall.com/lists/oss-security/2011/11/02/10 http://www.openwall.com/lists/oss-security/2011/11/02/6 http://www.openwall.com/lists/oss-security/2011/11/02/9 http://www.ubuntu.com/usn/USN-1262-1 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •