CVE-2011-4105: Robert Ancell Lightdm

Low severity, CVSS 1.9. EPSS: 0.3% chance of exploitation in the next 30 days.

LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on ~/.Xauthority.

Affected products

• Robert Ancell Lightdm: up to and including 1.0.5; version 0.0.1 only; version 0.0.2 only; version 0.0.3 only; version 0.0.4 only; version 0.1.0 only; …

Published 2012-02-17. Last modified 2026-06-16.