CVE ID:	CVE-2013-1940
Description:	X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.
Test IDs:	1.3.6.1.4.1.25623.1.0.865575   1.3.6.1.4.1.25623.1.1.4.2014.0744.1   1.3.6.1.4.1.25623.1.0.123516   1.3.6.1.4.1.25623.1.0.120457   1.3.6.1.4.1.25623.1.0.841400   1.3.6.1.4.1.25623.1.1.4.2013.0857.1   1.3.6.1.4.1.25623.1.0.702661   1.3.6.1.4.1.25623.1.0.871082   1.3.6.1.4.1.25623.1.0.865704   1.3.6.1.4.1.25623.1.1.13.2013.109.01   1.3.6.1.4.1.25623.1.1.4.2013.0859.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1940 Debian Security Information: DSA-2661 (Google Search) http://www.debian.org/security/2013/dsa-2661 http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104089.html http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102391.html http://www.openwall.com/lists/oss-security/2013/04/18/3 SuSE Security Announcement: openSUSE-SU-2013:0878 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-06/msg00015.html http://www.ubuntu.com/usn/USN-1803-1