Approved changes feed: RSS · Atom

cpe:2.3:a:robert_ancell:lightdm:1.0.2:*:*:*:*:*:*:*

part: a version: 1.0.2 update: *

VendorRobert Ancell (72f77eba-ff12-54f3-9933-2677fdf6e3f0)
ProductLightdm (6afbb00d-156d-5403-9b1a-056aea4e9533)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/lightdm purl2cpe 2026-06-01 10:12:49.418564
pkg:deb/ubuntu/lightdm purl2cpe 2026-06-01 10:12:49.418565
pkg:docker/lightdmlinki/lightdm purl2cpe 2026-06-01 10:12:49.418566
pkg:github/canonical/lightdm purl2cpe 2026-06-01 10:12:49.418568
pkg:gitlab/ubports/lightdm purl2cpe 2026-06-01 10:12:49.418569
pkg:rpm/fedora/lightdm purl2cpe 2026-06-01 10:12:49.418570
pkg:rpm/opensuse/lightdm purl2cpe 2026-06-01 10:12:49.418572

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1111 vulnerable 2026-06-08 05:00:47.518491 Details available
lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact.
Published: 2014-10-27T20:00:00.000Z
Updated: 2024-08-06T18:45:27.357Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0943 vulnerable 2026-06-08 05:00:46.589073 Details available
debian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT per ADT1/ADT2 due to different codebases and affected versions. CVE-2012-6648 has been assigned for the gdm-guest-session issue.
Published: 2014-05-22T23:00:00.000Z
Updated: 2024-08-06T18:45:25.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4105 vulnerable 2026-06-08 04:59:29.353157 Details available
LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on ~/.Xauthority.
Published: 2012-02-17T23:00:00.000Z
Updated: 2024-08-07T00:01:50.376Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3153 vulnerable 2026-06-08 04:58:10.808216 Details available
dmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary files via a symlink attack on ~/.dmrc.
Published: 2014-03-06T15:00:00.000Z
Updated: 2024-08-06T23:22:27.602Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.