[PLUG] Security Vulnerability in Xorg Screen Locking

Tim Bruce - PLUG timb at tbruce.com
Thu Jan 19 18:32:36 UTC 2012


On Thu, January 19, 2012 09:06, Daniel Hedlund wrote:
> Came across the a link on Hacker News a few minutes ago that talks about a
> bug in Xorg that allows anyone to bypass a locked screen using
> <CTRL>+<ALT>+*.  Most people are apparently vulnerable:
> http://seclists.org/oss-sec/2012/q1/200
>
> Using <SHIFT>+8 to access * doesn't work, but using numlock or a keypad
> does.
> _______________________________________________
> PLUG mailing list
> PLUG at lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
>

Interestingly enough - I just tried this and it didn't work.  I'm running
Ubuntu 11.10 and use a "blank screen" for the screen saver.  Maybe that's
the difference (rather than running an actual screen saver).

Tim
-- 
Timothy J. Bruce

visit my Website at: http://www.tbruce.com
Registered Linux User #325725





More information about the PLUG mailing list