CVE-2013-7374

Ubuntu Date and Time Indicator <13.10.0+13.10.x - Info Disclosure

Title source: llm

Description

The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date.

References (5)

Core 5

Core References

Issue Tracking x_refsource_confirm

https://bugs.launchpad.net/ubuntu/%2Bsource/indicator-datetime/%2Bbug/1246812

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-2186-1

Mailing List mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2014/04/29/3

Mailing List mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2014/04/30/1

Various Sources x_refsource_confirm

http://bazaar.launchpad.net/~indicator-applet-developers/indicator-datetime/trunk.13.10/revision/282

Scores

EPSS 0.0038

EPSS Percentile 30.2%

Details

CWE

CWE-264

Status published

Products (1)

canonical/ubuntu_linux 13.10

Published May 01, 2014

Tracked Since Feb 18, 2026