Executive Summary

Informations
Name CVE-2012-0064 First vendor Publication 2014-02-10
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score 4.6 Attack Range Local
Cvss Impact Score 6.4 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0064

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-264 Permissions, Privileges, and Access Controls

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 23
Application 4

OpenVAS Exploits

Date Description
2012-03-19 Name : Fedora Update for xkeyboard-config FEDORA-2012-0712
File : nvt/gb_fedora_2012_0712_xkeyboard-config_fc16.nasl
2012-02-12 Name : Gentoo Security Advisory GLSA 201201-16 (xkeyboard-config xorg-server)
File : nvt/glsa_201201_16.nasl
2012-01-25 Name : Fedora Update for xkeyboard-config FEDORA-2012-0709
File : nvt/gb_fedora_2012_0709_xkeyboard-config_fc15.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
78445 X.Org Grab-Breaking Keybinding Screensaver Lock Bypass

Nessus® Vulnerability Scanner

Date Description
2012-01-30 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201201-16.nasl - Type : ACT_GATHER_INFO
2012-01-25 Name : The remote Fedora host is missing a security update.
File : fedora_2012-0709.nasl - Type : ACT_GATHER_INFO
2012-01-20 Name : The remote Fedora host is missing a security update.
File : fedora_2012-0712.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://gu1.aeroxteam.fr/2012/01/19/bypass-screensaver-locker-program-xorg-111...
http://lists.x.org/archives/xorg-announce/2012-January/001797.html
http://lists.x.org/archives/xorg-devel/2012-January/028691.html
http://securitytracker.com/id?1026549
http://who-t.blogspot.com/2012/01/xkb-breaking-grabs-cve-2012-0064.html
http://www.openwall.com/lists/oss-security/2012/01/19/6
http://www.osvdb.org/78445
http://www.x.org/wiki/Development/Security/
https://bugzilla.redhat.com/show_bug.cgi?id=783039
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
Date Informations
2024-11-28 22:54:24
  • Multiple Updates
2024-11-28 12:28:24
  • Multiple Updates
2022-12-20 01:13:21
  • Multiple Updates
2021-05-05 01:09:52
  • Multiple Updates
2021-05-04 12:18:57
  • Multiple Updates
2021-04-22 01:22:40
  • Multiple Updates
2020-05-23 01:47:51
  • Multiple Updates
2020-05-23 00:32:34
  • Multiple Updates
2016-06-28 18:58:06
  • Multiple Updates
2016-04-26 21:23:17
  • Multiple Updates
2014-02-17 11:06:53
  • Multiple Updates
2014-02-12 00:18:53
  • Multiple Updates
2014-02-11 13:21:10
  • First insertion