Package: libpam-rsa
Version: 0.8-9-2.4
Tags: security

* What led up to the situation?
1. I manually locked my screen using xscreensaver-command -lock.
2. I moved the pointer, causing the xscreensaver password screen to appear.
3. I moved the pointer some more and waited for the timeout to expire.

* What was the outcome of this action?
xscreensaver crashed with a segfault, and the screen was unlocked,
including a root shell window.

This is very repeatable.  It may be relevant that I use libpam-rsa
instead of the normal pam-unix for login. 

-- 
Ian Zimmerman
gpg public key: 1024D/C6FF61AD
fingerprint: 66DC D68F 5C1B 4D71 2EE5  BD03 8A00 786C C6FF 61AD
http://www.gravatar.com/avatar/c66875cda51109f76c6312f4d4743d1e.png
Rule 420: All persons more than eight miles high to leave the court.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to