CVE-2013-4331
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7...
CVE-2013-4331 is a low vulnerability (CVSS 2.1) in Robert Ancell Lightdm, published September 19, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. Fixed in lightdm 1.6.2-1.
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file.
Exploit likelihood
What each source reports
NVD Score used
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file.
- Record
CVE-2013-4331- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file.
- Record
CVE-2013-4331- Updated
- 2026-11-02
EUVDEUVD-2013-4217 No score
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file.
- Record
EUVD-2013-4217- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p375-56p4-h24r No score
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7...
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file.
- Record
GHSA-p375-56p4-h24r- Updated
- 2026-11-02
OSV No score
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file.
- Record
CVE-2013-4331- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-4331 No score
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file.
- Record
DEBIAN-CVE-2013-4331- Updated
- 2026-11-02
OSVMGASA-2013-0286 No score
Updated lightdm package fixes security vulnerability
lightdm before 1.4.3, 1.6.2 and 1.7.14 created .Xauthority files with world-readable permissions (CVE-2013-4331).
Additionally, an issue where a user logged into a graphical desktop environment through lightdm would lose privleges to local devices (such as the sound card) when using the 'su' command has been fixed.
- Record
MGASA-2013-0286- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
bugs.launchpad.net/lightdm/%2Bbug/685212
nvd.nist.gov/vuln/detail/CVE-2013-4331
github.com/advisories/GHSA-p375-56p4-h24r
security-tracker.debian.org/tracker/CVE-2013-4331
advisories.mageia.org/MGASA-2013-0286.html
bugs.mageia.org/show_bug.cgi?id=11219
openwall.com/lists/oss-security/2013/09/11/4