Bug 399351

Summary:	Security: xorg-server 1.11 allows bypass of screensaver (CVE-2012-0064)
Product:	Gentoo Linux	Reporter:	Andrew Waters <awaters>
Component:	[OLD] Core system	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED DUPLICATE
Severity:	major
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Andrew Waters 2012-01-19 07:59:41 UTC

xorg-server enables exiting of screen savers without providing a password.

Reproducible: Always

Steps to Reproduce:
1.Lock screen (e.g. xscreensaver)
2.Press ALT+CTRL+numeric keypad *
3.
Actual Results:  
xscreensaver is killed

Expected Results:  
xscreensaver is not killed

Comment 1 Andrew Waters 2012-01-19 08:01:11 UTC

See http://seclists.org/oss-sec/2012/q1/197

Comment 2 Alex Legler (RETIRED) archtester

2012-01-19 08:54:20 UTC


*** This bug has been marked as a duplicate of bug 399347 ***