PT-2009-5726 · Sun+1 · Xscreensaver+2

Published 2009-09-28 · Updated 2017-08-17 · CVE-2009-3432

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions xscreensaver in Sun Solaris 10, and OpenSolaris before snv 112

Description The issue allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events when Xorg or Xnewt is used and RandR is enabled.

Recommendations For xscreensaver in Sun Solaris 10, and OpenSolaris before snv 112, consider disabling RandR or restricting access to Xorg and Xnewt as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2009-3432

Affected Products

Opensolaris

Xorg

Xscreensaver

References · 9

• http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-26-1 · Vendor Advisory
• http://securityfocus.com/bid/36488 · Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-249646-1 · Vendor Advisory
• http://secunia.com/advisories/36830 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3432 · Security Note
• http://osvdb.org/58278 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53424 · Note
• http://securitytracker.com/id?1022936 · Note
• http://vupen.com/english/advisories/2009/2728 · Note