{"action":"Upgrade lightdm to 0.9.6-1 or later.","affected":[{"fixed":"0.9.6-1","introduced":"0"}],"component":"lightdm","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["0.9.6-1"],"id":"tcs_01M5N9VC5WF997843CQFJD1RQ0","modified_at":"2026-10-23T18:03:45.060851591Z","published_at":"2019-11-19T22:15:11.007Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2011-3349","https://security-tracker.debian.org/tracker/CVE-2011-3349"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2011-3349#Debian:13/lightdm","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2011-3349"}],"summary":"lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can al"}