PT-2014-2787 · Pyxtrlock · Pyxtrlock

Paul Lhussiez · Published 2014-05-19 · Updated 2014-05-19 · CVE-2013-4426

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions pyxtrlock versions prior to 0.1

Description The issue allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash due to an incorrect variable name.

Recommendations For versions prior to 0.1, update to version 0.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2013-4426

Affected Products

Pyxtrlock

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-4426 · Security Note
• https://github.com/leonnnn/pyxtrlock/blob/master/CHANGELOG · Note
• https://github.com/leonnnn/pyxtrlock/issues/8 · Note
• http://seclists.org/oss-sec/2013/q4/109 · Note