PT-2009-5726 · Sun+1 · Xscreensaver+2

Publicado 2009-09-28 · Atualizado 2017-08-17 · CVE-2009-3432

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions xscreensaver in Sun Solaris 10, and OpenSolaris before snv 112

Description The issue allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events when Xorg or Xnewt is used and RandR is enabled.

Recommendations For xscreensaver in Sun Solaris 10, and OpenSolaris before snv 112, consider disabling RandR or restricting access to Xorg and Xnewt as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2009-3432

Produtos afetados

Opensolaris

Xorg

Xscreensaver

Referências · 9

• http://osvdb.org/58278 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53424 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-26-1 · Aviso do Fabricante
• http://securitytracker.com/id?1022936 · Nota
• http://securityfocus.com/bid/36488 · Correção
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-249646-1 · Aviso do Fabricante
• http://secunia.com/advisories/36830 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/2728 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3432 · Nota de Segurança