CVE-2007-1859 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2007-1859
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-1859

Description: XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/34054 UBUNTU http://www.ubuntu.com/usn/usn-474-1 SUSE http://www.novell.com/linux/security/advisories/2007_9_sr.html ST 1017996 SAID Secunia Advisory: SA25105 Secunia Advisory: SA25065 Secunia Advisory: SA25118 Secunia Advisory: SA25116 Secunia Advisory: SA25119 Secunia Advisory: SA25225 Secunia Advisory: SA25610 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0322.html MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:097 GENTOO http://security.gentoo.org/glsa/glsa-200705-14.xml CONFIRM BID 23783

Return to the previous page.