CVE-2007-4693

The SecurityAgent component in Mac OS X 10.4 through 10.4.10 allows attackers with physical access to bypass the authentication dialog of the screen saver and send keystrokes to a process, related to "handling of keyboard focus between secure text fields."...

CVE-2007-4693

The SecurityAgent component in Mac OS X 10.4 through 10.4.10 allows attackers with physical access to bypass the authentication dialog of the screen saver and send keystrokes to a process, related to "handling of keyboard focus between secure text fields."...

Ubuntu 7.10 : gnome-screensaver vulnerability (USN-537-1)

Jens Askengren discovered that gnome-screensaver became confused when running under Compiz, and could lose keyboard lock focus. A local attacker could exploit this to bypass the user's locked screen saver. Note that Tenable Network Security has extracted the preceding description block directly...

Pole five-stroke input method of a vulnerability-vulnerability warning-the black bar safety net

Find pole five-stroke input method an exploit With this vulnerability you can bypass the system login password, thereby entering the system. Test system: vista Test keyboard version: compiled version: 2007.2.26.0.98 Specific process is this: the elect of this input method, right-click the input...

Ubuntu 5.10 : bluez-utils vulnerability (USN-413-1)

A flaw was discovered in the HID daemon of bluez-utils. A remote attacker could gain control of the mouse and keyboard if hidd was enabled. This does not affect a default Ubuntu installation, since hidd is normally disabled. Note that Tenable Network Security has extracted the preceding descripti...

USN-537-2: Compiz vulnerability

USN-537-1 fixed vulnerabilities in gnome-screensaver. The fixes were incomplete, and only reduced the scope of the vulnerability, without fully solving it. This update fixes related problems in compiz. Original advisory details: Jens Askengren discovered that gnome-screensaver became confused whe...

USN-537-1: gnome-screensaver vulnerability

Jens Askengren discovered that gnome-screensaver became confused when running under Compiz, and could lose keyboard lock focus. A local attacker could exploit this to bypass the user's locked screen saver...

Mozilla Foundation Security Advisory 2007-32

Mozilla Foundation Security Advisory 2007-32 Title: File input focus stealing vulnerability Impact: Moderate Announced: October 18, 2007 Reporter: hong, Charles McAuley Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.8 SeaMonkey 1.1.5 Description A user on the Sla.ckers.org forums named hong...

File input focus stealing vulnerability — Mozilla

A user on the Sla.ckers.org forums named hong reported that a file upload control could be filled programmatically by switching page focus to the label before a file upload form control for selected keyboard events. An attacker could use this trick to steal files from the users' computer if the...

[SECURITY] Fedora 7 Update: sylpheed-2.3.1-5

This program is an X based fast email client which has features like: o user-friendly and intuitive interface o integrated NetNews client partially implemented o ability of keyboard-only operation o Mew/Wanderlust-like key bind o multipart MIME o unlimited multiple account handling o message...

Pole five-stroke input method of a vulnerability-vulnerability warning-the black bar safety net

Find pole five-stroke input method an exploit With this vulnerability you can bypass the system login password, thereby entering the system. Test system: vista Test keyboard version: compiled version: 2007.2.26.0.98 Specific process is this: the elect of this input method, right-click the input...

[Full-disclosure] Assorted browser vulnerabilities

Hello, Will keep it brief. A couple of browser bugs, fresh from the oven, hand crafted with love: 1 Title : MSIE page update race condition CRITICAL Impact : cookie stealing / setting, page hijacking, memory corruption Demo : http://lcamtuf.coredump.cx/ierace/ ...aka the bait & switch...

Hack tips of the hands to teach you to easily crack the cafe! - Vulnerability warning-the black bar safety net

Crack Vientiane secrets A with Alt+Ctrl+Del key combination（Vientiane） After the boot, when appears the blue background, immediately press the key combination, pop-up“close Program”dialog box, if inside there is“client”after the immediately closed, when the discovery of“ | --- Unknown”program is...

Moderate: Red Hat Security Advisory: bluez-utils security update

Updated bluez-utils packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The bluez-utils package contains Bluetooth daemons and utilities. A flaw was found in the...

security flaw

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack...

Windows Vista reproduction IME privilege elevation vulnerability-vulnerability warning-the black bar safety net

Today saw the news, reports the Google keyboard there is privilege elevation vulnerability. Immediately in the Vista under the test a little, found the problem really very serious, and the vulnerability is not only present in the Google keyboard, I use the pole of the Chinese input method also...

Fedora Core 5 : openssh-4.3p2-4.12.fc5 (2007-395)

Fri Mar 30 2007 Miloslav Trmac - 4.3p2-4.12 - Fix an information leak in Kerberos password authentication CVE-2006-5052 Resolves: 234640 - Fri Nov 10 2006 Tomas Mraz - 4.3p2-4.11 - CVE-2006-5794 - properly detect failed key verify in monitor 214641 - kill all ssh sessions when stop is called in...

MDKA-2006:027 : xorg-x11

A misapplied patch in a recent X.org updated caused keyboard layout problems which resulted in some users being unable to use the CTRL-ALT-function key combination to switch to a console, as well as other keyboard mapping issues. Updated packages have been re-patched to correct these issues...

MDKA-2006:006 : xorg-x11

Issues have been reported with display corruption for various cards, including several ATI and Nvidia cards when using the free drivers. There was also an issue with the Greek keyboard layout. These should be corrected by the upstream 6.9.0 final, which this package is based on. Updated packages...

Mandrake Linux Security Advisory : bluez-utils (MDKSA-2007:014)

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack. hidd is not enabled by default on Mandriva 2006.0. This update adds...