Vulnerabilities > Robert Ancell > Lightdm > 0.9.6

DATE CVE VULNERABILITY TITLE RISK
2014-10-27 CVE-2012-1111 Information Exposure vulnerability in Robert Ancell Lightdm
lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact.
local
low complexity
robert-ancell CWE-200
4.6
2014-03-06 CVE-2011-3153 Link Following vulnerability in multiple products
dmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary files via a symlink attack on ~/.dmrc.
1.9
2012-02-17 CVE-2011-4105 Link Following vulnerability in Robert Ancell Lightdm
LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on ~/.Xauthority.
1.9