CVE-2013-7374
The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10...
The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date.
Exploit likelihood
What each source reports
NVD Score used
The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date.
- Record
CVE-2013-7374- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date.
- Record
CVE-2013-7374- Updated
- 2026-11-02
EUVDEUVD-2013-7144 No score
The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date.
- Record
EUVD-2013-7144- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xc86-4263-5hwg No score
The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10...
The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date.
- Record
GHSA-xc86-4263-5hwg- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-7374 No score
The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date.
- Record
UBUNTU-CVE-2013-7374- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
indicator-datetimeUbuntu:14.04:LTS |
before 13.10.0+14.04.20131125-0ubuntu1, plus listed versions 13.10.0+13.10.20131016.2-0ubuntu113.10.0+13.10.20131023.2-0ubuntu1 |
13.10.0+14.04.20131125-0ubuntu1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-7374 is a medium vulnerability (CVSS 4.6) in Canonical Ubuntu Linux, published April 30, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in indicator-datetime 13.10.0+14.04.20131125-0ubuntu1.
References
bugs.launchpad.net/ubuntu/%2Bsource/indicator-datetime/%2Bbug/1246812
ubuntu.com/usn/USN-2186-1
openwall.com/lists/oss-security/2014/04/29/3
bazaar.launchpad.net/~indicator-applet-developers/indicator-datetime/trunk.13.10/revision/282
nvd.nist.gov/vuln/detail/CVE-2013-7374