CVE-2013-4143
First published: Fri May 30 2014(Updated: )
The (1) checkPasswd and (2) checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and later, which allows attackers to bypass the screen lock via vectors related to invalid salts.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| David Bagley Xlockmore | <=5.42 | |
| David Bagley Xlockmore | =5.24 | |
| David Bagley Xlockmore | =5.25 | |
| David Bagley Xlockmore | =5.26 | |
| David Bagley Xlockmore | =5.27 | |
| David Bagley Xlockmore | =5.28 | |
| David Bagley Xlockmore | =5.29 | |
| David Bagley Xlockmore | =5.30 | |
| David Bagley Xlockmore | =5.31 | |
| David Bagley Xlockmore | =5.32 | |
| David Bagley Xlockmore | =5.33 | |
| David Bagley Xlockmore | =5.34 | |
| David Bagley Xlockmore | =5.35 | |
| David Bagley Xlockmore | =5.36 | |
| David Bagley Xlockmore | =5.37 | |
| David Bagley Xlockmore | =5.38 | |
| David Bagley Xlockmore | =5.39 | |
| David Bagley Xlockmore | =5.40 | |
| David Bagley Xlockmore | =5.41 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- collector/nvd-index
- vendor/david bagley
- canonical/david bagley xlockmore
- version/david bagley xlockmore/5.42
- version/david bagley xlockmore/5.24
- version/david bagley xlockmore/5.25
- version/david bagley xlockmore/5.26
- version/david bagley xlockmore/5.27
- version/david bagley xlockmore/5.28
- version/david bagley xlockmore/5.29
- version/david bagley xlockmore/5.30
- version/david bagley xlockmore/5.31
- version/david bagley xlockmore/5.32
- version/david bagley xlockmore/5.33
- version/david bagley xlockmore/5.34
- version/david bagley xlockmore/5.35
- version/david bagley xlockmore/5.36
- version/david bagley xlockmore/5.37
- version/david bagley xlockmore/5.38
- version/david bagley xlockmore/5.39
- version/david bagley xlockmore/5.40
- version/david bagley xlockmore/5.41