CVE

Id
67321  
CVE No.
CVE-2013-7374  
Status
Candidate  
Description
The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date.  
Phase
Assigned (20140430)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
649438 67321 CVE-2013-7374 MLIST:[oss-security] 20140429 CVE Request: indicator-datetime issue  View
649439 67321 CVE-2013-7374 URL:http://www.openwall.com/lists/oss-security/2014/04/29/3  View
649440 67321 CVE-2013-7374 MLIST:[oss-security] 20140430 Re: CVE Request: indicator-datetime issue  View
649441 67321 CVE-2013-7374 URL:http://www.openwall.com/lists/oss-security/2014/04/30/1  View
649442 67321 CVE-2013-7374 CONFIRM:http://bazaar.launchpad.net/~indicator-applet-developers/indicator-datetime/trunk.13.10/revision/282  View
649443 67321 CVE-2013-7374 CONFIRM:https://bugs.launchpad.net/ubuntu/%2Bsource/indicator-datetime/%2Bbug/1246812  View
649444 67321 CVE-2013-7374 UBUNTU:USN-2186-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24890 JVNDB-2013-006465 Node.js 用 tomato モジュールの管理 API における認証を回避される脆弱性 Node.js 用 tomato モジュールの管理 API は、アクセスキーが文字列に設定されている場合、アクセスキーを適切にチェックしないため、認証を回避される脆弱性が存在します。 CVE-2013-7379 67321 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006465.html  View