PT-2006-2344 · Gnome · Gnome-Screensaver

Sam Morris · Published 2006-03-21 · Updated 2017-07-20 · CVE-2006-1335

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Low

Base vector

AV:L/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gnome screensaver versions prior to 2.14

Description The issue allows attackers with physical access to cause the screensaver to crash and access the session via the Ctrl+Alt+Keypad-Multiply keyboard sequence, which removes the grab from gnome, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs enabled.

Recommendations For versions prior to 2.14, consider disabling the screensaver or restricting physical access to the system until a patch is available. As a temporary workaround, disabling the AllowDeactivateGrabs and AllowClosedownGrabs options on the X server may minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-1335

Affected Products

Gnome-Screensaver

References · 8

• http://secunia.com/advisories/19280 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1335 · Security Note
• https://osv.dev/vulnerability/CVE-2006-1335 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-1335 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-1335 · Vendor Advisory
• http://bugzilla.gnome.org/show_bug.cgi?id=326663 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25340 · Note
• http://osvdb.org/24015 · Note