CVE-2010-0923
Summary
| CVE | CVE-2010-0923 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2010-03-03 19:30:00 UTC |
| Updated | 2010-03-04 05:00:00 UTC |
| Description | Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate attackers to bypass KScreenSaver screen locking and access an unattended workstation by pressing the Enter key at a certain time, related to multiple forked processes. |
Risk And Classification
Problem Types: CWE-362
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | Patch, Vendor Advisory |
| '[oss-security] CVE Request: KDE screensaver unlock issue similar to GNOME one' - MARC | MLIST | marc.info | |
| 217882 – Desktop locking crashs after resume from suspend to RAM [QSocketNotifier::setEnabled, PasswordDlg::reapVerify, PasswordDlg::handleVerify] | CONFIRM | bugs.kde.org | |
| www.kde.org/info/security/advisory-20100217-1.txt | CONFIRM | www.kde.org | |
| oss-security - Re: Re: CVE Request: KDE screensaver unlock issue similar to GNOME one | MLIST | www.openwall.com | |
| [KDE] Revision 1089241 | CONFIRM | websvn.kde.org | Patch |
| [KDE] Revision 1089213 | CONFIRM | websvn.kde.org | Patch |
| Bug 579280 – KDE 4.4.0: Screen may be unlocked without password | CONFIRM | bugzilla.novell.com | |
| KDE KRunner Lock Module Race Condition Weakness - Advisories - Community | SECUNIA | secunia.com | Vendor Advisory |
| '[oss-security] Re: CVE Request: KDE screensaver unlock issue similar to GNOME one' - MARC | MLIST | marc.info | |
| [KDE] Diff of /trunk/KDE/kdebase/workspace/krunner/lock/lockdlg.cc | CONFIRM | websvn.kde.org | |
| KDE KRunner Race Condition Lets Physically Local Users Bypass the Screen Lock - SecurityTracker | SECTRACK | securitytracker.com | |
| 226449 – Security problem - repeatedly pressing the 'return' key when the screen is locked will unlock without needing a password, or will hang kscreenlocker | CONFIRM | bugs.kde.org | |
| 'Re: [oss-security] Re: CVE Request: KDE screensaver unlock issue' - MARC | MLIST | marc.info | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.