PT-2010-2193 · Gnome · Gnome-Screensaver

Halfline + 1 · Publicado 2010-02-24 · Atualizado 2017-08-17 · CVE-2010-0422

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:L/AC:H/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions gnome-screensaver versions 2.28.x through 2.28.2

Description The issue allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, due to improper synchronization of the state of screen locking and the unlock dialog in situations involving a change to the number of monitors.

Recommendations For gnome-screensaver versions 2.28.x through 2.28.2, update to version 2.28.3 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2010-0422

Produtos afetados

Gnome-Screensaver

Referências · 16

• http://securityfocus.com/bid/38248 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0422 · Nota de Segurança
• http://git.gnome.org/browse/gnome-screensaver/commit/?id=f93a22c175090cf02e80bc3ee676b53f1251f685 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56364 · Nota
• https://security-tracker.debian.org/tracker/CVE-2010-0422 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=564464 · Nota
• http://git.gnome.org/browse/gnome-screensaver/commit/?id=271ae93d7b140b8ba40d77f9e4ce894e5fd1b554 · Nota
• https://bugzilla.gnome.org/show_bug.cgi?id=609789 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035115.html · Aviso do Fabricante
• http://secunia.com/advisories/38583 · Aviso do Fabricante
• http://marc.info/?l=oss-security&m=126601292400764&w=2 · Nota
• http://secunia.com/advisories/38565 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-0422 · Aviso do Fabricante
• http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.3.news · Nota
• https://osv.dev/vulnerability/CVE-2010-0422 · Aviso do Fabricante