** Visibility changed to: Public
** Changed in: gnome-screensaver (Ubuntu)
Status: New => Confirmed
** Changed in: gnome-screensaver (Ubuntu)
Status: Confirmed => Triaged
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-screensaver in Ubuntu.
https://bugs.launchpad.net/bugs/1005619
Title:
Information disclosure vulnerability in locked desktop
Status in “gnome-screensaver” package in Ubuntu:
Triaged
Bug description:
Locked Ubuntu 10.04 desktop
When connecting a USB-device (tested with mobile phone) and
simultaneously moving mouse or doing a few keystrokes, it is possible
to get the last active window visible on the screen. It can take a lot
of tries or just a few, not sure what causes it (slow movement, timing
with USB connection, etc?). Many times the top and bottom panels get
revealed showing the open program names.
This might be a race condition of some sort, but I haven't really
debugged what goes on. When the mobile phone (Symbian) is inserted
into USB port, it opens up two windows stating "a media which contain
digital photos have been inserted" and prompts for user action.
Because Ubuntu 10.04 LTS is still almost a year supported, this is a
risk for organisations that continue the use of this version (hotel
rooms, meeting rooms, workplace, etc). I haven't been able to
replicate this in Ubuntu 12.04 LTS setups.
ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: gnome-screensaver 2.30.0-0ubuntu2.1
ProcVersionSignature: Ubuntu 2.6.32-41.89-generic 2.6.32.59+drm33.24
Uname: Linux 2.6.32-41-generic i686
Architecture: i386
Date: Mon May 28 20:37:32 2012
GnomeSessionIdleInhibited: No
GnomeSessionInhibitors: None
InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release i386 (20100427.1)
ProcEnviron:
LANG=en_US.utf8
SHELL=/bin/bash
SourcePackage: gnome-screensaver
Symptom: security
Title: Screen locking issue
WindowManager: gnome-wm
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/1005619/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
