CVE-2009-4641

2010-02-1121:30:00

Debian Security Bug Tracker

security-tracker.debian.org

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.2%

JSON

gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended.

OSVersionArchitecturePackageVersionFilename
Debian12allgnome-screensaver< 2.28.0-2gnome-screensaver_2.28.0-2_all.deb
Debian11allgnome-screensaver< 2.28.0-2gnome-screensaver_2.28.0-2_all.deb
Debian10allgnome-screensaver< 2.28.0-2gnome-screensaver_2.28.0-2_all.deb
Debian999allgnome-screensaver< 2.28.0-2gnome-screensaver_2.28.0-2_all.deb
Debian13allgnome-screensaver< 2.28.0-2gnome-screensaver_2.28.0-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	gnome-screensaver	< 2.28.0-2	gnome-screensaver_2.28.0-2_all.deb
Debian	11	all	gnome-screensaver	< 2.28.0-2	gnome-screensaver_2.28.0-2_all.deb
Debian	10	all	gnome-screensaver	< 2.28.0-2	gnome-screensaver_2.28.0-2_all.deb
Debian	999	all	gnome-screensaver	< 2.28.0-2	gnome-screensaver_2.28.0-2_all.deb
Debian	13	all	gnome-screensaver	< 2.28.0-2	gnome-screensaver_2.28.0-2_all.deb