← Zuruck zu CVEs

CVE-2013-4509

N/A

Beschreibung

The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the entered password characters, which allows physically proximate attackers to obtain a user password by reading the lockscreen.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht11/23/2013

Zuletzt geandert4/29/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

ibus_project:ibusopensuse:opensuse

Schwachen (CWE)

CWE-255

Referenzen

http://lists.opensuse.org/opensuse-updates/2013-11/msg00036.html(secalert@redhat.com)

http://lists.opensuse.org/opensuse-updates/2013-12/msg00024.html(secalert@redhat.com)

http://lists.opensuse.org/opensuse-updates/2014-01/msg00045.html(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=1027028(secalert@redhat.com)

https://code.google.com/p/mozc/issues/attachmentText?id=199&aid=1990002000&name=ibus-mozc_support_ibus-1.5.4_rev2.diff&token=P62umpXGXx68XJT6zyvBA727wqE%3A1383693105690(secalert@redhat.com)

https://github.com/ibus/ibus-anthy/commit/6aae0a9f145f536515e268dd6b25aa740a5edfe7(secalert@redhat.com)

https://groups.google.com/forum/#%21topic/ibus-user/mvCHDO1BJUw(secalert@redhat.com)

http://lists.opensuse.org/opensuse-updates/2013-11/msg00036.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-updates/2013-12/msg00024.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-updates/2014-01/msg00045.html(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=1027028(af854a3a-2127-422b-91ae-364da2661108)

https://code.google.com/p/mozc/issues/attachmentText?id=199&aid=1990002000&name=ibus-mozc_support_ibus-1.5.4_rev2.diff&token=P62umpXGXx68XJT6zyvBA727wqE%3A1383693105690(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/ibus/ibus-anthy/commit/6aae0a9f145f536515e268dd6b25aa740a5edfe7(af854a3a-2127-422b-91ae-364da2661108)

https://groups.google.com/forum/#%21topic/ibus-user/mvCHDO1BJUw(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.