REDHAT-BUG-1030431: Medium severity fedora vulnerability
Fedora 18 is found to be vulnerable to the blind command execution on the lock screen, and Fedora 19 is found to execute command through "Enter the Command" dialog box at the lock screen.
The issue is that in Fedora 18, when you open either the Activities panel or "Enter a command" dialog box (Alt+F2), and then lock the screen or let the screensaver lock the screen, then if you start typing on the lock screen, instead of entering the password or just waking the screen, it actually types anything you type on the Activities panel or "Enter a command" dialog box, so anyone who enters a executable command and press enter, the command is executed even when the screen is locked.
In Fedora 19, the "Enter the Command" dialog box is visible even after you lock the screen, so anyone can write the commands in the box and execute them over a locked screen.
The issue is still to be fixed and tested on Gnome Fedora 18 and 19 machines. KDE version were not found to be affected.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1030431?
The severity of REDHAT-BUG-1030431 is considered high due to its potential for blind command execution.
Who is affected by REDHAT-BUG-1030431?
REDHAT-BUG-1030431 affects users of Fedora versions 18 and 19.
How do I fix REDHAT-BUG-1030431?
To fix REDHAT-BUG-1030431, it is recommended to upgrade to the latest stable version of Fedora that contains the security patch.
What is the nature of the vulnerability in REDHAT-BUG-1030431?
The vulnerability in REDHAT-BUG-1030431 allows for blind command execution at the lock screen.
Is REDHAT-BUG-1030431 present in versions newer than Fedora 19?
No, REDHAT-BUG-1030431 has been specifically identified in Fedora versions 18 and 19.