CVE-2011-3349

CVE-2011-3349 describes a privilege escalation vulnerability in LightDM versions prior to 0.9.6. The issue stems from LightDM writing to .dmrc and Xauthority files with root privileges within user-controlled directories, allowing a local user to overwrite root-owned files via a symlink. This vulnerability carries a high CVSS score of 7.8, indicating a significant risk of complete compromise of confidentiality, integrity, and availability, with low attack complexity and no user interaction required. There is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, nor significant community discussion or media coverage surrounding this CVE.