I have discovered a side effect to this bug that implies a security
vulnerability.

You are in graphical tty7 and select the "switch user" option.
The xserver gets stuck trying to open a new graphical tty. You have black 
screen on tty8. You cannot go back to tty7.

Still you can open a non-graphical tty (tty1-tty6).
You have to login on the new tty, so you write username and password.

But all keyboard activity is still being captured on original tty7!!
You are exposing your login and password credentials (at least) to the 
foreground application on tty7.

-- 
You received this bug notification because you are a member of Ubuntu-X,
which is subscribed to xserver-xorg-video-intel in Ubuntu.
https://bugs.launchpad.net/bugs/1247189

Title:
  Ubuntu freezes completely when switching user

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1247189/+subscriptions

_______________________________________________
Mailing list: https://launchpad.net/~ubuntu-x-swat
Post to     : ubuntu-x-swat@lists.launchpad.net
Unsubscribe : https://launchpad.net/~ubuntu-x-swat
More help   : https://help.launchpad.net/ListHelp

Reply via email to