PT-2006-2344 · Gnome · Gnome-Screensaver

Sam Morris · Publicado 2006-03-21 · Atualizado 2017-07-20 · CVE-2006-1335

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Baixa

Vetor base

AV:L/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gnome screensaver versions prior to 2.14

Description The issue allows attackers with physical access to cause the screensaver to crash and access the session via the Ctrl+Alt+Keypad-Multiply keyboard sequence, which removes the grab from gnome, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs enabled.

Recommendations For versions prior to 2.14, consider disabling the screensaver or restricting physical access to the system until a patch is available. As a temporary workaround, disabling the AllowDeactivateGrabs and AllowClosedownGrabs options on the X server may minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-1335

Produtos afetados

Gnome-Screensaver

Referências · 8

• http://secunia.com/advisories/19280 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-1335 · Nota de Segurança
• http://bugzilla.gnome.org/show_bug.cgi?id=326663 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25340 · Nota
• http://osvdb.org/24015 · Nota
• https://osv.dev/vulnerability/CVE-2006-1335 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-1335 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2006-1335 · Aviso do Fabricante