PT-2014-2219 · Canonical · Lightdm

Austin Clements · Publicado 2014-10-27 · Atualizado 2024-06-15 · CVE-2012-1111

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions lightdm versions prior to 1.0.9

Description The issue is related to the improper closure of file descriptors before opening a child process, allowing local users to potentially write to the lightdm log or have other unspecified impact.

Recommendations For versions prior to 1.0.9, update to version 1.0.9 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2012-1111

OPENSUSE-SU-2024:10033-1

Produtos afetados

Lightdm

Referências · 14

• 🔥 https://bugzilla.novell.com/show_bug.cgi?id=745339 · Exploit
• 🔥 https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/927060 · Exploit
• 🔥 http://seclists.org/oss-sec/2012/q1/566 · Exploit
• 🔥 http://seclists.org/oss-sec/2012/q1/557 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:10033-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2012-1111 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-1111 · Nota
• https://suse.com/security/cve/CVE-2011-4105 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1111 · Nota de Segurança
• https://suse.com/security/cve/CVE-2011-3153 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-1111 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2012-03/msg00019.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2012-1111 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2011-3349 · Nota