← Back to CVEs

CVE-2013-4509

N/A

Description

The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the entered password characters, which allows physically proximate attackers to obtain a user password by reading the lockscreen.

CVE Details

CVSS v3.1 ScoreN/A

Published11/23/2013

Last Modified4/29/2026

Sourcenvd

Honeypot Sightings0

Affected Products

ibus_project:ibusopensuse:opensuse

Weaknesses (CWE)

CWE-255

References

http://lists.opensuse.org/opensuse-updates/2013-11/msg00036.html(secalert@redhat.com)

http://lists.opensuse.org/opensuse-updates/2013-12/msg00024.html(secalert@redhat.com)

http://lists.opensuse.org/opensuse-updates/2014-01/msg00045.html(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=1027028(secalert@redhat.com)

https://code.google.com/p/mozc/issues/attachmentText?id=199&aid=1990002000&name=ibus-mozc_support_ibus-1.5.4_rev2.diff&token=P62umpXGXx68XJT6zyvBA727wqE%3A1383693105690(secalert@redhat.com)

https://github.com/ibus/ibus-anthy/commit/6aae0a9f145f536515e268dd6b25aa740a5edfe7(secalert@redhat.com)

https://groups.google.com/forum/#%21topic/ibus-user/mvCHDO1BJUw(secalert@redhat.com)

http://lists.opensuse.org/opensuse-updates/2013-11/msg00036.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-updates/2013-12/msg00024.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-updates/2014-01/msg00045.html(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=1027028(af854a3a-2127-422b-91ae-364da2661108)

https://code.google.com/p/mozc/issues/attachmentText?id=199&aid=1990002000&name=ibus-mozc_support_ibus-1.5.4_rev2.diff&token=P62umpXGXx68XJT6zyvBA727wqE%3A1383693105690(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/ibus/ibus-anthy/commit/6aae0a9f145f536515e268dd6b25aa740a5edfe7(af854a3a-2127-422b-91ae-364da2661108)

https://groups.google.com/forum/#%21topic/ibus-user/mvCHDO1BJUw(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.