PT-2007-4562 · Sun+1 · Sun Solaris+1

Published 2007-06-19 · Updated 2017-10-11 · CVE-2007-3283

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GNOME XScreenSaver in Sun Solaris versions 8 and 9 before 20070417

Description The issue is related to the screen locking mechanism. When the root user is logged into the console, the screen does not automatically lock after a period of inactivity, potentially allowing physically proximate attackers to access the console.

Recommendations For Sun Solaris versions 8 and 9 before 20070417, consider configuring the screen saver to lock the screen after a shorter period of inactivity to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-3283

Affected Products

Gnome-Screensaver

Sun Solaris

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-3283 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101338-1 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2037 · Note
• http://jwz.org/xscreensaver/faq.html#root-lock · Note
• http://osvdb.org/36586 · Note