KDE Screensaver Unlock Dialog Race Condition Lock Bypass Vulnerability
BID:38214
Info
KDE Screensaver Unlock Dialog Race Condition Lock Bypass Vulnerability
| Bugtraq ID: | 38214 |
| Class: | Race Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 12 2010 12:00AM |
| Updated: | Feb 17 2010 06:02PM |
| Credit: | Felix Lemke |
| Vulnerable: |
S.u.S.E. openSUSE 11.2 KDE KDE 4.4 |
| Not Vulnerable: | |
Discussion
KDE Screensaver Unlock Dialog Race Condition Lock Bypass Vulnerability
The KDE screensaver application is prone to a vulnerability that allows an attacker who has physical console access to bypass the user's locked screen.
UPDATE (February 17, 2010): This issue affects the KRunner application used to perform password validation. Computers may be affected by this issue even when no screensaver is being used.
KDE 4.4.0 is vulnerable; other versions may also be affected.
The KDE screensaver application is prone to a vulnerability that allows an attacker who has physical console access to bypass the user's locked screen.
UPDATE (February 17, 2010): This issue affects the KRunner application used to perform password validation. Computers may be affected by this issue even when no screensaver is being used.
KDE 4.4.0 is vulnerable; other versions may also be affected.
Exploit / POC
KDE Screensaver Unlock Dialog Race Condition Lock Bypass Vulnerability
To exploit this issue, attackers require physical console access.
To exploit this issue, attackers require physical console access.
Solution / Fix
KDE Screensaver Unlock Dialog Race Condition Lock Bypass Vulnerability
Solution:
A sourcecode patch is available. Please see the references for more information.
Solution:
A sourcecode patch is available. Please see the references for more information.
References
KDE Screensaver Unlock Dialog Race Condition Lock Bypass Vulnerability
References:
References:
- Bug 217882 - Desktop locking crashs after resume from suspend to RAM [QSocketNo (Felix Lemke)
- Bug 226449 - Security problem - repeatedly pressing the 'return' key when the s (Steven Gilberd)
- KDE Homepage (KDE)
- Revision 1089213 (mitchell)
- Revision 1089241 (mitchell)
- Stefan Endres (Bug 579280 - VUL-0: KDE4: Screen may be unlocked without password (due to memory)
- KDE Security Advisory: KRunner lock module race condition (KDE)