← Volver a CVEs

CVE-2013-4509

N/A

Descripcion

The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the entered password characters, which allows physically proximate attackers to obtain a user password by reading the lockscreen.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado11/23/2013

Ultima modificacion4/29/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

ibus_project:ibusopensuse:opensuse

Debilidades (CWE)

CWE-255

Referencias

http://lists.opensuse.org/opensuse-updates/2013-11/msg00036.html(secalert@redhat.com)

http://lists.opensuse.org/opensuse-updates/2013-12/msg00024.html(secalert@redhat.com)

http://lists.opensuse.org/opensuse-updates/2014-01/msg00045.html(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=1027028(secalert@redhat.com)

https://code.google.com/p/mozc/issues/attachmentText?id=199&aid=1990002000&name=ibus-mozc_support_ibus-1.5.4_rev2.diff&token=P62umpXGXx68XJT6zyvBA727wqE%3A1383693105690(secalert@redhat.com)

https://github.com/ibus/ibus-anthy/commit/6aae0a9f145f536515e268dd6b25aa740a5edfe7(secalert@redhat.com)

https://groups.google.com/forum/#%21topic/ibus-user/mvCHDO1BJUw(secalert@redhat.com)

http://lists.opensuse.org/opensuse-updates/2013-11/msg00036.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-updates/2013-12/msg00024.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-updates/2014-01/msg00045.html(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=1027028(af854a3a-2127-422b-91ae-364da2661108)

https://code.google.com/p/mozc/issues/attachmentText?id=199&aid=1990002000&name=ibus-mozc_support_ibus-1.5.4_rev2.diff&token=P62umpXGXx68XJT6zyvBA727wqE%3A1383693105690(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/ibus/ibus-anthy/commit/6aae0a9f145f536515e268dd6b25aa740a5edfe7(af854a3a-2127-422b-91ae-364da2661108)

https://groups.google.com/forum/#%21topic/ibus-user/mvCHDO1BJUw(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.