View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2011-3349 medium priority: Ubuntu including 1 source packages (lightdm), 8 status rows across 8 suites (hardy, lucid, maverick, natty, oneiric, precise, quantal, upstream): DNE 3, not-affected 2, released 2, ignored 1.
lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation.