PT-2017-17681 · Canonical+1 · Lightdm+2

G. Geshev + 1 · Publicado 2017-04-04 · Atualizado 2019-05-23 · CVE-2017-7358

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LightDM versions prior to 1.23.0, specifically versions through 1.22.0

Description A directory traversal issue exists in the debian/guest-account.sh script of LightDM, allowing local attackers to own arbitrary directory path locations and escalate privileges to root when the guest user logs out.

Recommendations For versions through 1.22.0, update to version 1.23.0 or later to resolve the issue.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

ALT-PU-2019-1877

ALT-PU-2019-1900

CVE-2017-7358

USN-3255-1

Produtos afetados

Alt Linux

Lightdm

Ubuntu

Referências · 17

• 🔥 https://exploit-db.com/exploits/41923 · Exploit
• https://packages.altlinux.org/ru/vuln/CVE-2017-7358 · Nota
• https://errata.altlinux.org/ALT-PU-2019-1900 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-3255-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-7358 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7358 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2019-1877 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-3255-1 · Aviso do Fabricante
• https://lists.freedesktop.org/archives/lightdm/2017-April/001059.html · Nota
• https://cve.org/CVERecord?id=CVE-2017-7358 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-7358 · Aviso do Fabricante
• http://securityfocus.com/bid/97486 · Nota
• https://ubuntu.com/usn/usn-3255-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7358 · Nota de Segurança
• http://bazaar.launchpad.net/~lightdm-team/lightdm/trunk/revision/2478 · Nota