CVE-2010-0923 - kdebase: race condition may allow local attackers to bypass screen locking

Back Back to CVE browser

MEDIUM

kdebase: race condition may allow local attackers to bypass screen locking

Published Mar 3, 2010

6.9

MEDIUM

CVSS 2.0

EPSS 0.28%

Description

Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate attackers to bypass KScreenSaver screen locking and access an unattended workstation by pressing the Enter key at a certain time, related to multiple forked processes.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-362

Race Condition

CWE-368

References (19)

http://bugs.kde.org/show_bug.cgi?id=226449
x_refsource_CONFIRM
http://marc.info/?l=oss-security&m=126598163422670&w=2
mailing-listx_refsource_MLIST
http://marc.info/?l=oss-security&m=126599909614401&w=2
mailing-listx_refsource_MLIST
http://marc.info/?l=oss-security&m=126600468622421&w=2
mailing-listx_refsource_MLIST
http://secunia.com/advisories/38600
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1023641
vdb-entryx_refsource_SECTRACK
http://websvn.kde.org/?revision=1089213&view=revision
x_refsource_CONFIRMPatch
http://websvn.kde.org/?view=revision&revision=1089241
x_refsource_CONFIRMPatch
http://websvn.kde.org/trunk/KDE/kdebase/workspace/krunner/lock/lockdlg.cc?r1=1089213&r2=1089212&pathrev=1089213
x_refsource_CONFIRM
http://www.kde.org/info/security/advisory-20100217-1.txt
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2010/02/17/3
mailing-listx_refsource_MLIST
http://www.vupen.com/english/advisories/2010/0409
vdb-entryx_refsource_VUPENPatchVendor Advisory
https://access.redhat.com/security/cve/CVE-2010-0923
Vendor Advisory
https://bugs.kde.org/show_bug.cgi?id=217882
x_refsource_CONFIRM
https://bugzilla.novell.com/show_bug.cgi?id=579280
x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=570330
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-0948
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-0923
https://www.cve.org/CVERecord?id=CVE-2010-0923

Link	Providers	Tags
http://bugs.kde.org/show_bug.cgi?id=226449		x_refsource_CONFIRM
http://marc.info/?l=oss-security&m=126598163422670&w=2		mailing-listx_refsource_MLIST
http://marc.info/?l=oss-security&m=126599909614401&w=2		mailing-listx_refsource_MLIST
http://marc.info/?l=oss-security&m=126600468622421&w=2		mailing-listx_refsource_MLIST
http://secunia.com/advisories/38600		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1023641		vdb-entryx_refsource_SECTRACK
http://websvn.kde.org/?revision=1089213&view=revision		x_refsource_CONFIRMPatch
http://websvn.kde.org/?view=revision&revision=1089241		x_refsource_CONFIRMPatch
http://websvn.kde.org/trunk/KDE/kdebase/workspace/krunner/lock/lockdlg.cc?r1=1089213&r2=1089212&pathrev=1089213		x_refsource_CONFIRM
http://www.kde.org/info/security/advisory-20100217-1.txt		x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2010/02/17/3		mailing-listx_refsource_MLIST
http://www.vupen.com/english/advisories/2010/0409		vdb-entryx_refsource_VUPENPatchVendor Advisory
https://access.redhat.com/security/cve/CVE-2010-0923		Vendor Advisory
https://bugs.kde.org/show_bug.cgi?id=217882		x_refsource_CONFIRM
https://bugzilla.novell.com/show_bug.cgi?id=579280		x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=570330		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-0948		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-0923
https://www.cve.org/CVERecord?id=CVE-2010-0923