PT-2010-1451 · Gnome · Gnome-Screensaver

Jamie Strandboge + 1 · Publicado 2010-02-11 · Atualizado 2010-07-07 · CVE-2009-4641

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions gnome-screensaver version 2.28.0

Description The issue allows physically proximate attackers to access an unattended workstation where screen locking was intended, due to gnome-screensaver not resuming its activation settings after an inhibiting application becomes unavailable on the session bus.

Recommendations For gnome-screensaver version 2.28.0, consider disabling the screensaver functionality until a patch is available, and ensure that workstations are properly secured when unattended to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2009-4641

Produtos afetados

Gnome-Screensaver

Referências · 8

• http://ubuntu.com/usn/USN-866-1 · Aviso do Fabricante
• https://launchpad.net/bugs/411350 · Nota
• https://security-tracker.debian.org/tracker/CVE-2009-4641 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2010:040 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-4641 · Aviso do Fabricante
• https://bugzilla.gnome.org/show_bug.cgi?id=600488 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2009-4641 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2009-4641 · Aviso do Fabricante