xlockmore 5.13 allows potential xlock bypass when FVWM switches to the same virtual desktop as a new Gaim window.
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Link | Tags |
---|---|
https://security-tracker.debian.org/tracker/CVE-2006-0062 | third party advisory |
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=309760 | exploit third party advisory patch |