PT-2007-4562 · Sun+1 · Sun Solaris+1

Publicado 2007-06-19 · Atualizado 2017-10-11 · CVE-2007-3283

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GNOME XScreenSaver in Sun Solaris versions 8 and 9 before 20070417

Description The issue is related to the screen locking mechanism. When the root user is logged into the console, the screen does not automatically lock after a period of inactivity, potentially allowing physically proximate attackers to access the console.

Recommendations For Sun Solaris versions 8 and 9 before 20070417, consider configuring the screen saver to lock the screen after a shorter period of inactivity to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-3283

Produtos afetados

Gnome-Screensaver

Sun Solaris

Referências · 5

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2037 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3283 · Nota de Segurança
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101338-1 · Aviso do Fabricante
• http://jwz.org/xscreensaver/faq.html#root-lock · Nota
• http://osvdb.org/36586 · Nota