PT-2010-2193 · Gnome · Gnome-Screensaver

Halfline + 1 · Published 2010-02-24 · Updated 2017-08-17 · CVE-2010-0422

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:L/AC:H/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions gnome-screensaver versions 2.28.x through 2.28.2

Description The issue allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, due to improper synchronization of the state of screen locking and the unlock dialog in situations involving a change to the number of monitors.

Recommendations For gnome-screensaver versions 2.28.x through 2.28.2, update to version 2.28.3 or later to resolve the issue.

Fix

Related Identifiers

CVE-2010-0422

Affected Products

Gnome-Screensaver

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2010-0422 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2010-0422 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035115.html · Vendor Advisory
• http://secunia.com/advisories/38583 · Vendor Advisory
• http://secunia.com/advisories/38565 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-0422 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-0422 · Vendor Advisory
• http://securityfocus.com/bid/38248 · Note
• http://git.gnome.org/browse/gnome-screensaver/commit/?id=f93a22c175090cf02e80bc3ee676b53f1251f685 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56364 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=564464 · Note
• http://git.gnome.org/browse/gnome-screensaver/commit/?id=271ae93d7b140b8ba40d77f9e4ce894e5fd1b554 · Note
• https://bugzilla.gnome.org/show_bug.cgi?id=609789 · Note
• http://marc.info/?l=oss-security&m=126601292400764&w=2 · Note
• http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.3.news · Note