CVE-2013-4459
Ubuntu Security Notice USN-2012-1
Severity Score
7.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account.
LightDM 1.7.5 hasta la 1.8.3 y 1.9.x anterior a 1.9.2, no aplica el perfil AppArmor a la cuenta de invitado, lo que permite a usuarios locales evitar las restricciones previstas por el aprovechamiento de la cuenta de invitado.
Christian Prim discovered that Light Display Manager incorrectly applied the AppArmor security profile when the Guest account is used. A local attacker could use this issue to possibly gain access to sensitive information.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-06-12 CVE Reserved
- 2013-11-06 CVE Published
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://lists.freedesktop.org/archives/lightdm/2013-October/000471.html | Mailing List | |
| http://lists.freedesktop.org/archives/lightdm/2013-October/000472.html | Mailing List |
| URL | Date | SRC |
|---|---|---|
| https://bugs.launchpad.net/ubuntu/%2Bsource/lightdm/%2Bbug/1243339 | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.ubuntu.com/usn/USN-2012-1 | 2013-11-25 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.7.5 Search vendor "Robert Ancell" for product "Lightdm" and version "1.7.5" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.7.6 Search vendor "Robert Ancell" for product "Lightdm" and version "1.7.6" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.7.7 Search vendor "Robert Ancell" for product "Lightdm" and version "1.7.7" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.7.8 Search vendor "Robert Ancell" for product "Lightdm" and version "1.7.8" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.7.9 Search vendor "Robert Ancell" for product "Lightdm" and version "1.7.9" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.7.10 Search vendor "Robert Ancell" for product "Lightdm" and version "1.7.10" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.7.11 Search vendor "Robert Ancell" for product "Lightdm" and version "1.7.11" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.7.12 Search vendor "Robert Ancell" for product "Lightdm" and version "1.7.12" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.7.13 Search vendor "Robert Ancell" for product "Lightdm" and version "1.7.13" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.7.14 Search vendor "Robert Ancell" for product "Lightdm" and version "1.7.14" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.7.15 Search vendor "Robert Ancell" for product "Lightdm" and version "1.7.15" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.7.16 Search vendor "Robert Ancell" for product "Lightdm" and version "1.7.16" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.7.17 Search vendor "Robert Ancell" for product "Lightdm" and version "1.7.17" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.7.18 Search vendor "Robert Ancell" for product "Lightdm" and version "1.7.18" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.8.0 Search vendor "Robert Ancell" for product "Lightdm" and version "1.8.0" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.8.1 Search vendor "Robert Ancell" for product "Lightdm" and version "1.8.1" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.8.2 Search vendor "Robert Ancell" for product "Lightdm" and version "1.8.2" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.8.3 Search vendor "Robert Ancell" for product "Lightdm" and version "1.8.3" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.9.0 Search vendor "Robert Ancell" for product "Lightdm" and version "1.9.0" | - |
Affected
| ||||||
| Robert Ancell Search vendor "Robert Ancell" | Lightdm Search vendor "Robert Ancell" for product "Lightdm" | 1.9.1 Search vendor "Robert Ancell" for product "Lightdm" and version "1.9.1" | - |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 13.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "13.10" | - |
Affected
| ||||||