Moderate: Red Hat Security Advisory: xscreensaver security update

An updated xscreensaver package that fixes two security flaws is now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XScreenSaver is a collection of screensavers. A keyboard focus flaw was found...

CVE-2006-1439

CVE-2006-1439 affects NSSecureTextField in AppKit on Apple Mac OS X 10.4.6. The vulnerability: secure input is not re-enabled under certain circumstances, potentially allowing other window-session applications to monitor input characters and keyboard events. The description and related references...

Ubuntu 4.10 / 5.04 : xscreensaver vulnerability (USN-269-1)

In some cases, xscreensaver did not properly grab the keyboard when reading the password for unlocking the screen, so that the password was typed into the currently active application window. The only known vulnerable case was when xscreensaver activated while an rdesktop session was currently...

USN-269-1: xscreensaver vulnerability

In some cases, xscreensaver did not properly grab the keyboard when reading the password for unlocking the screen, so that the password was typed into the currently active application window. The only known vulnerable case was when xscreensaver activated while an rdesktop session was currently...

CVE-2004-2655

The CVE-2004-2655 issue affects XScreenSaver (xscreensaver) components used with rdesktop 1.3.1 and Fedora-era setups. The root cause is a keyboard focus flaw: XScreenSaver prompt for password did not reliably ensure keyboard focus, potentially leaking the user’s password to the focused program w...

CVE-2004-2655

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen...

CVE-2006-1335

gnome screensaver before 2.14, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs enabled, allows attackers with physical access to cause the screensaver to crash and access the session via the Ctl+Alt+Keypad-Multiply keyboard sequence, which removes the grab from gnome...

Overflow keyboard program vulnerability to get administrator permissions-bug warning-the black bar safety net

No computer is safe without a security perimeter is not compromised. We have to do is use all the resources for invasion. Here you can see the most exciting invasion of record, you can learn the most practical intrusion techniques. Here are all invasion lovers Paradise. But remember yo, the...

Secunia Research: Microsoft Internet Explorer Keyboard Shortcut Processing Vulnerability

====================================================================== Secunia Research 13/12/2005 Microsoft Internet Explorer Keyboard Shortcut Processing Vulnerability ====================================================================== Table of Contents Affected...

CVE-2005-4176

AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory...

CVE-2005-4175

CVE-2005-4175 affects Insyde BIOS V190. The issue: the keyboard buffer is not cleared after reading the BIOS password during system startup, enabling a local attacker to read the password from physical memory. Practical impact is limited to local access scenarios as per the provided description. ...

CVE-2005-4175

Insyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory...

CVE-2005-4176

AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory...

CVE-2005-4176

CVE-2005-4176 affects AWARD BIOS Modular 4.50pg and is caused by failure to clear the keyboard buffer after BIOS password reads, enabling local users to read the password from physical memory. The vulnerability is local in scope with low base score (2.1); details on exploit code or practical in‑t...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (2)

Multiple Vendor BIOS - Keyboard Buffer Password Persistence 2 // source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)

Multiple Vendor BIOS - Keyboard Buffer Password Persistence 1 source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on th...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)

source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running on affected computers, the memory...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (2)

// source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running on affected computers, the memor...

Apple SA 2003-12-19

The remote host is missing Security Update 2003-12-19. Mac OS X contains a flaw that may allow a malicious user with physical access to gain root access. The issue is triggered when the Ctrl and c keys are pressed on the connected USB keyboard during boot and thus interrupting the system...

Apple SA 2003-12-19

The remote host is missing Security Update 2003-12-19. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...