[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256288

 
 

909

 
 

199146

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2012-0064Date: (C)2014-02-11   (M)2023-12-22


xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.6
Exploit Score: 3.9
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
SECTRACK-1026549
OSVDB-78445
http://www.openwall.com/lists/oss-security/2012/01/19/6
http://lists.x.org/archives/xorg-announce/2012-January/001797.html
http://lists.x.org/archives/xorg-devel/2012-January/028691.html
http://gu1.aeroxteam.fr/2012/01/19/bypass-screensaver-locker-program-xorg-111-and-up/
http://who-t.blogspot.com/2012/01/xkb-breaking-grabs-cve-2012-0064.html
http://www.x.org/wiki/Development/Security/
https://bugzilla.redhat.com/show_bug.cgi?id=783039

CPE    21
cpe:/a:x:x.org_x11:6.8
cpe:/a:x:x.org_x11:6.7
cpe:/a:x:x.org_x11:6.4
cpe:/a:x:x.org_x11:7.3
...
CWE    1
CWE-264
OVAL    2
oval:org.secpod.oval:def:103519
oval:org.secpod.oval:def:103472

© SecPod Technologies