PT-2010-1451 · Gnome · Gnome-Screensaver

Jamie Strandboge + 1 · Published 2010-02-11 · Updated 2010-07-07 · CVE-2009-4641

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions gnome-screensaver version 2.28.0

Description The issue allows physically proximate attackers to access an unattended workstation where screen locking was intended, due to gnome-screensaver not resuming its activation settings after an inhibiting application becomes unavailable on the session bus.

Recommendations For gnome-screensaver version 2.28.0, consider disabling the screensaver functionality until a patch is available, and ensure that workstations are properly secured when unattended to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2009-4641

Affected Products

Gnome-Screensaver

References · 8

• http://ubuntu.com/usn/USN-866-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-4641 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2010:040 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-4641 · Vendor Advisory
• https://bugzilla.gnome.org/show_bug.cgi?id=600488 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-4641 · Security Note
• https://osv.dev/vulnerability/CVE-2009-4641 · Vendor Advisory
• https://launchpad.net/bugs/411350 · Note