CVE:CVE-2011-4105
CNNVD:CNNVD-201111-134
LightDM 1.0.4和1.0.5版本中存在安全漏洞。由于"xsession_setup()"函数(src/xsession.c)不正确的改变"~/.Xauthority"文件的所有权，攻击者可借助创建符号链接方式改变任意文件的所有权，并以提升的特权执行某些操作。
solution:Upgrade robert_ancell lightdm to a higher version than 1.0.5,0.0.1,0.0.2,0.0.3,0.0.4,0.1.0,0.1.1,0.1.2,0.2.0,0.2.1,0.2.2,0.2.3,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.3.6,0.4.0,0.4.1,0.4.2,0.4.3,0.4.4,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.1.0,and avoid the version (,1.0.5],0.0.1,0.0.2,0.0.3,0.0.4,0.1.0,0.1.1,0.1.2,0.2.0,0.2.1,0.2.2,0.2.3,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.3.6,0.4.0,0.4.1,0.4.2,0.4.3,0.4.4,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.1.0