Secunia
Login
|
|
CVE Reference: CVE-2007-1859 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2007-1859 |
|
|
Description: XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/34054 UBUNTU http://www.ubuntu.com/usn/usn-474-1 SUSE http://www.novell.com/linux/security/advisories/2007_9_sr.html ST 1017996 SAID Secunia Advisory: SA25065 Secunia Advisory: SA25105 Secunia Advisory: SA25118 Secunia Advisory: SA25116 Secunia Advisory: SA25119 Secunia Advisory: SA25225 Secunia Advisory: SA25610 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0322.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11459 OSVDB 35531 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:097 GENTOO http://security.gentoo.org/glsa/glsa-200705-14.xml CONFIRM BID 23783 |
|
| Return to the previous page. |
