68 matches found
CVE-2006-0061
xlockmore 5.13 and 5.22 segfaults when using libpam-opensc and returns the underlying xsession. This allows unauthorized users access to the X session...
Session fixation
xlockmore 5.13 and 5.22 segfaults when using libpam-opensc and returns the underlying xsession. This allows unauthorized users access to the X session...
CVE-2006-0062
xlockmore 5.13 allows potential xlock bypass when FVWM switches to the same virtual desktop as a new Gaim window...
CVE-2006-0062
CVE-2006-0062 relates to xlockmore 5.13, where a bypass of the xlock screen is possible when FVWM switches to the same virtual desktop as a new Gaim window. This is the explicit description across multiple sources (NVD entry and mirrored reports). The root cause is described as a potential xlock ...
CVE-2006-0061
xlockmore 5.13 and 5.22 segfaults when using libpam-opensc and returns the underlying xsession. This allows unauthorized users access to the X session...
CVE-2006-0061
CVE-2006-0061 affects xlockmore versions 5.13 and 5.22, where a segfault occurs when using libpam-opensc, causing the system to return the underlying X session and potentially allowing unauthorized users to access the X session. The NVD metrics show high/critical impact, with confidentially, inte...
Gentoo Security Advisory GLSA 201309-03
Gentoo Linux Local Security Checks GLSA 201309-03 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
The vulnerability of the Gentoo Linux operating system, which allows a malicious individual to compromise the accessibility of protected information
The vulnerability of the xlockmore package up to version 5.43 in the Gentoo Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited locally...
Mandriva Linux Security Advisory : xlockmore (MDVSA-2015:118)
Updated xlockmore packages fix security vulnerability : xlockmore before 5.45 contains a security flaw related to a bad value of fnt for pyro2 which could cause an X error. This update backports the fix for version 5.43. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...
MGASA-2014-0554 Updated xlockmore packages fix a security vulnerability
Updated xlockmore packages fix security vulnerability xlockmore before 5.45 contains a security flaw related to a bad value of fnt for pyro2 which could cause an X error. This update backports the fix for version 5.43...
Updated xlockmore packages fix a security vulnerability
Updated xlockmore packages fix security vulnerability xlockmore before 5.45 contains a security flaw related to a bad value of fnt for pyro2 which could cause an X error. This update backports the fix for version 5.43...
David Bagley xlock 4.16 User Supplied Format String Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1585/info A vulnerability exists in versions of the xlockmore program, originally written by David Bagley. It is believed to affect all versions of xlock derived from xlockmore. This includes the xlock shipped with a numb...
CVE-2013-4143
The 1 checkPasswd and 2 checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and later, which allows attackers to bypass the screen lock via vectors related to...
Code injection
The 1 checkPasswd and 2 checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and later, which allows attackers to bypass the screen lock via vectors related to...
CVE-2013-4143
The 1 checkPasswd and 2 checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and later, which allows attackers to bypass the screen lock via vectors related to...
CVE-2013-4143
The CVE-2013-4143 entry covers Xlockmore (xlockmore) prior to version 5.43, where the functions checkPasswd and checkGroupXlockPasswds mishandle a NULL return from crypt/dispcrypt (glibc 2.17+), allowing a local attacker to bypass screen lock via invalid-salt vectors. Impact is a local denial of ...
GLSA-201309-03 : Xlockmore: Denial of Service
The remote host is affected by the vulnerability described in GLSA-201309-03 Xlockmore: Denial of Service A Denial of Service flaw was found in the way Xlockmore performed the passing of arguments to the underlying localtime call, when the dlock mode was used. Impact : A local attacker could...
Xlockmore: Denial of service
Background Xlockmore is just another screensaver application for X. Description A Denial of Service flaw was found in the way Xlockmore performed the passing of arguments to the underlying localtime call, when the ‘dlock’ mode was used. Impact A local attacker could possibly cause a Denial of...
Fedora Update for xlockmore FEDORA-2013-13258
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : xlockmore-5.43-1.fc19 (2013-13258)
fixed 'NULL pointer dereference leads to crash and bypass of screen lock' Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...