PT-2010-1228 · Gnome · Gnome-Power-Manager

Mark W. Tomlinson + 1 · Publicado 2010-09-07 · Atualizado 2010-09-08 · CVE-2006-7240

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions gnome-power-manager version 2.14.0

Description The issue is related to the improper implementation of the lock on suspend and lock on hibernate settings, which are supposed to lock the screen when the suspend or hibernate button is pressed. This might allow physically proximate attackers to access an unattended laptop via a resume action.

Recommendations For gnome-power-manager version 2.14.0, consider disabling the suspend and hibernate functions or manually locking the screen before suspending or hibernating the laptop to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2006-7240

Produtos afetados

Gnome-Power-Manager

Referências · 5

• https://osv.dev/vulnerability/DEBIAN-CVE-2006-7240 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2006-7240 · Aviso do Fabricante
• https://bugs.launchpad.net/ubuntu/+source/gnome-power-manager/+bug/42052 · Nota
• https://osv.dev/vulnerability/CVE-2006-7240 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-7240 · Nota de Segurança