SB2013042503 - Permissions, Privileges, and Access Controls in xorg-server (Alpine package)

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2013042503

SB2013042503 - Permissions, Privileges, and Access Controls in xorg-server (Alpine package)

Published: April 25, 2013

Security Bulletin ID SB2013042503
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2013-1940)

The vulnerability allows a local non-authenticated attacker to gain access to sensitive information.

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty. Per http://www.ubuntu.com/usn/USN-1803-1/ "A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.10 Ubuntu 12.04 LTS Ubuntu 11.10 Ubuntu 10.04 LTS"


Remediation

Install update from vendor's website.

References