CVE

Id
61887  
CVE No.
CVE-2013-1940  
Status
Candidate  
Description
X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
619713 61887 CVE-2013-1940 MLIST:[oss-security] 20130418 Xorg-x11-server: Information disclosure due enabling events from hot-plug devices despite input from the device being momentarily disabled  View
619714 61887 CVE-2013-1940 URL:http://www.openwall.com/lists/oss-security/2013/04/18/3  View
619715 61887 CVE-2013-1940 CONFIRM:https://bugs.freedesktop.org/show_bug.cgi?id=63353  View
619716 61887 CVE-2013-1940 DEBIAN:DSA-2661  View
619717 61887 CVE-2013-1940 URL:http://www.debian.org/security/2013/dsa-2661  View
619718 61887 CVE-2013-1940 FEDORA:FEDORA-2013-5883  View
619719 61887 CVE-2013-1940 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104089.html  View
619720 61887 CVE-2013-1940 FEDORA:FEDORA-2013-5928  View
619721 61887 CVE-2013-1940 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102391.html  View
619722 61887 CVE-2013-1940 SUSE:openSUSE-SU-2013:0878  View
619723 61887 CVE-2013-1940 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00015.html  View
619724 61887 CVE-2013-1940 UBUNTU:USN-1803-1  View

Related JVN