Approved changes feed: RSS · Atom

cpe:2.3:a:robert_ancell:lightdm:1.0.3:*:*:*:*:*:*:*

part: a version: 1.0.3 update: *

VendorRobert Ancell (72f77eba-ff12-54f3-9933-2677fdf6e3f0)
ProductLightdm (6afbb00d-156d-5403-9b1a-056aea4e9533)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/lightdm purl2cpe 2026-06-01 10:12:49.418573
pkg:deb/ubuntu/lightdm purl2cpe 2026-06-01 10:12:49.418575
pkg:docker/lightdmlinki/lightdm purl2cpe 2026-06-01 10:12:49.418576
pkg:github/canonical/lightdm purl2cpe 2026-06-01 10:12:49.418577
pkg:gitlab/ubports/lightdm purl2cpe 2026-06-01 10:12:49.418579
pkg:rpm/fedora/lightdm purl2cpe 2026-06-01 10:12:49.418580
pkg:rpm/opensuse/lightdm purl2cpe 2026-06-01 10:12:49.418581

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1111 vulnerable 2026-06-08 05:00:47.518510 Details available
lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact.
Published: 2014-10-27T20:00:00.000Z
Updated: 2024-08-06T18:45:27.357Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0943 vulnerable 2026-06-08 05:00:46.589582 Details available
debian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT per ADT1/ADT2 due to different codebases and affected versions. CVE-2012-6648 has been assigned for the gdm-guest-session issue.
Published: 2014-05-22T23:00:00.000Z
Updated: 2024-08-06T18:45:25.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4105 vulnerable 2026-06-08 04:59:29.353836 Details available
LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on ~/.Xauthority.
Published: 2012-02-17T23:00:00.000Z
Updated: 2024-08-07T00:01:50.376Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3153 vulnerable 2026-06-08 04:58:10.808763 Details available
dmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary files via a symlink attack on ~/.dmrc.
Published: 2014-03-06T15:00:00.000Z
Updated: 2024-08-06T23:22:27.602Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.