CVE-2013-1940

2013-04-1700:00:00

ubuntu.com

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.001

Percentile

25.0%

JSON

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly
restrict access to input events when adding a new hot-plug device, which
might allow physically proximate attackers to obtain sensitive information,
as demonstrated by reading passwords from a tty.

Bugs

<https://bugs.freedesktop.org/show_bug.cgi?id=63353>

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchxorg-server< 2:1.7.6-2ubuntu7.12UNKNOWN
ubuntu11.10noarchxorg-server< 2:1.10.4-1ubuntu4.5UNKNOWN
ubuntu12.04noarchxorg-server< 2:1.11.4-0ubuntu10.13UNKNOWN
ubuntu12.10noarchxorg-server< 2:1.13.0-0ubuntu6.2UNKNOWN
ubuntu12.04noarchxorg-server-lts-quantal< 2:1.13.0-0ubuntu6.1~precise3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	xorg-server	< 2:1.7.6-2ubuntu7.12	UNKNOWN
ubuntu	11.10	noarch	xorg-server	< 2:1.10.4-1ubuntu4.5	UNKNOWN
ubuntu	12.04	noarch	xorg-server	< 2:1.11.4-0ubuntu10.13	UNKNOWN
ubuntu	12.10	noarch	xorg-server	< 2:1.13.0-0ubuntu6.2	UNKNOWN
ubuntu	12.04	noarch	xorg-server-lts-quantal	< 2:1.13.0-0ubuntu6.1~precise3	UNKNOWN