Compiz Fusion 'Expo' Plugin Security Bypass Vulnerability

Bugtraq ID:	32712
Class:	Design Error
CVE:	CVE-2008-6514
Remote:	No
Local:	Yes
Published:	Dec 08 2008 12:00AM
Updated:	Apr 13 2015 09:26PM
Credit:	Ubuntu
Vulnerable:	Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 SuSE SUSE Linux Enterprise 11 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Compiz Compiz Fusion 0
Not Vulnerable:

Compiz Fusion 'Expo' Plugin Security Bypass Vulnerability

Compiz Fusion is prone to a security-bypass vulnerability because of an issue with the 'Expo' plugin.

Attackers may be able to bypass certain security restrictions, which may allow them to bypass the screensaver protection and to access the locked desktop.

Versions prior to Compiz Fusion 0.5.2, 0.7.4, and 0.7.8 are vulnerable.

Compiz Fusion 'Expo' Plugin Security Bypass Vulnerability

Attackers can exploit this issue using readily available tools.

Compiz Fusion 'Expo' Plugin Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 7.10 i386

• Ubuntu compiz-fusion-plugins-main_0.5.2+git20070928-0ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/compiz-fusion-plugins-ma in/compiz-fusion-plugins-main_0.5.2+git20070928-0ubuntu2.2_i386.deb

Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu compiz-fusion-plugins-main_0.7.8-0ubuntu2.2_lpia.deb
  http://ports.ubuntu.com/pool/main/c/compiz-fusion-plugins-main/compiz- fusion-plugins-main_0.7.8-0ubuntu2.2_lpia.deb

Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu compiz-fusion-plugins-main_0.5.2+git20070928-0ubuntu2.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/compiz-fusion-plugins-ma in/compiz-fusion-plugins-main_0.5.2+git20070928-0ubuntu2.2_powerpc.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu compiz-fusion-plugins-main_0.7.8-0ubuntu2.2_sparc.deb
  http://ports.ubuntu.com/pool/main/c/compiz-fusion-plugins-main/compiz- fusion-plugins-main_0.7.8-0ubuntu2.2_sparc.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu compiz-fusion-plugins-main_0.7.4-0ubuntu6.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/compiz-fusion-plugins-main/compiz- fusion-plugins-main_0.7.4-0ubuntu6.2_powerpc.deb

Mandriva Linux Mandrake 2009.0

• Mandriva compiz-fusion-plugins-main-0.7.8-0.20080912.1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva compiz-fusion-plugins-main-devel-0.7.8-0.20080912.1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu compiz-fusion-plugins-main_0.7.8-0ubuntu2.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/compiz-fusion-plugins-main/compiz- fusion-plugins-main_0.7.8-0ubuntu2.2_powerpc.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu compiz-fusion-plugins-main_0.7.8-0ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/compiz-fusion-plugins-ma in/compiz-fusion-plugins-main_0.7.8-0ubuntu2.2_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu compiz-fusion-plugins-main_0.7.4-0ubuntu6.2_sparc.deb
  http://ports.ubuntu.com/pool/main/c/compiz-fusion-plugins-main/compiz- fusion-plugins-main_0.7.4-0ubuntu6.2_sparc.deb

Ubuntu Ubuntu Linux 7.10 amd64

• Ubuntu compiz-fusion-plugins-main_0.5.2+git20070928-0ubuntu2.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/compiz-fusion-plugins-ma in/compiz-fusion-plugins-main_0.5.2+git20070928-0ubuntu2.2_amd64.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu compiz-fusion-plugins-main_0.7.4-0ubuntu6.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/compiz-fusion-plugins-ma in/compiz-fusion-plugins-main_0.7.4-0ubuntu6.2_i386.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva compiz-fusion-plugins-main-0.7.8-0.20080912.1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva compiz-fusion-plugins-main-devel-0.7.8-0.20080912.1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu compiz-fusion-plugins-main_0.7.4-0ubuntu6.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/compiz-fusion-plugins-ma in/compiz-fusion-plugins-main_0.7.4-0ubuntu6.2_amd64.deb

Ubuntu Ubuntu Linux 7.10 sparc

• Ubuntu compiz-fusion-plugins-main_0.5.2+git20070928-0ubuntu2.2_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/compiz-fusion-plugins-ma in/compiz-fusion-plugins-main_0.5.2+git20070928-0ubuntu2.2_sparc.deb

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu compiz-fusion-plugins-main_0.7.8-0ubuntu2.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/compiz-fusion-plugins-ma in/compiz-fusion-plugins-main_0.7.8-0ubuntu2.2_amd64.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu compiz-fusion-plugins-main_0.7.4-0ubuntu6.2_lpia.deb
  http://ports.ubuntu.com/pool/main/c/compiz-fusion-plugins-main/compiz- fusion-plugins-main_0.7.4-0ubuntu6.2_lpia.deb

Ubuntu Ubuntu Linux 7.10 lpia

• Ubuntu compiz-fusion-plugins-main_0.5.2+git20070928-0ubuntu2.2_lpia.deb
  http://ports.ubuntu.com/pool/main/c/compiz-fusion-plugins-main/compiz- fusion-plugins-main_0.5.2+git20070928-0ubuntu2.2_lpia.deb

Compiz Fusion 'Expo' Plugin Security Bypass Vulnerability

References:

• Compiz Homepage (Compiz)