Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-1859
HistoryMay 02, 2007 - 8:19 p.m.

CVE-2007-1859

2007-05-0220:19:00
CWE-287
[email protected]
web.nvd.nist.gov

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.1%

JSON

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.

Affected configurations

NVD
Node
redhatenterprise_linuxMatch2.1advanced_server
OR
redhatenterprise_linuxMatch2.1enterprise_server
OR
redhatenterprise_linuxMatch2.1workstation
OR
redhatenterprise_linuxMatch3.0advanced_servers
OR
redhatenterprise_linuxMatch3.0enterprise_server
OR
redhatenterprise_linuxMatch3.0workstation
OR
redhatenterprise_linuxMatch4.0advanced_server
OR
redhatenterprise_linuxMatch4.0enterprise_server
OR
redhatenterprise_linuxMatch4.0workstation
OR
redhatenterprise_linux_desktopMatch3.0
OR
redhatenterprise_linux_desktopMatch4.0
OR
redhatlinux_advanced_workstationMatch2.1itanium
AND
xscreensaverxscreensaverMatch4.10

Related

nessus 12
openvas 8
ubuntucve 2
veracode 1
cvelist 2
cve 2
oraclelinux 1
securityvulns 2
gentoo 1
centos 2
ubuntu 1
prion 2
redhat 1
debiancve 2
nvd 1
nessus
nessus
CentOS 3 : xscreensaver (CESA-2007:0322)
2007-05-03 00:00:00
openSUSE 10 Security Update : xscreensaver (xscreensaver-3240)
2007-10-17 00:00:00
Scientific Linux Security Update : xscreensaver on SL4 i386/x86_64
2012-08-01 00:00:00
openvas
openvas
Mandriva Update for xscreensaver MDKSA-2007:097 (xscreensaver)
2009-04-09 00:00:00
SLES9: Security update for xscreensaver
2009-10-10 00:00:00
Gentoo Security Advisory GLSA 200705-14 (xscreensaver)
2008-09-24 00:00:00
ubuntucve
ubuntucve
CVE-2007-1859
2007-05-02 00:00:00
CVE-2008-0887
2008-04-06 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:15:32
cvelist
cvelist
CVE-2007-1859
2007-05-02 20:00:00
CVE-2008-0887
2008-04-06 23:00:00
cve
cve
CVE-2007-1859
2007-05-02 20:19:00
CVE-2008-0887
2008-04-06 23:44:00
oraclelinux
oraclelinux
Important: xscreensaver security update
2007-05-08 00:00:00
securityvulns
securityvulns
[ MDKSA-2007:097 ] - Updated xscreensaver packages fix vulnerability
2007-05-04 00:00:00
xscreensaver console access protection bypass
2007-05-04 00:00:00
gentoo
gentoo
XScreenSaver: Privilege escalation
2007-05-13 00:00:00
centos
centos
xscreensaver security update
2007-05-02 16:47:42
xscreensaver security update
2007-05-03 23:03:02
ubuntu
ubuntu
xscreensaver vulnerability
2007-06-12 00:00:00
prion
prion
Authentication flaw
2007-05-02 20:19:00
Sql injection
2008-04-06 23:44:00
redhat
redhat
(RHSA-2007:0322) Important: xscreensaver security update
2007-05-02 00:00:00
debiancve
debiancve
CVE-2007-1859
2007-05-02 20:19:00
CVE-2008-0887
2008-04-06 23:44:00
nvd
nvd
CVE-2008-0887
2008-04-06 23:44:00

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.1%

JSON
Related for NVD:CVE-2007-1859
nessus12openvas8ubuntucve2veracode1cvelist2cve2oraclelinux1securityvulns2gentoo1centos2ubuntu1prion2redhat1debiancve2nvd1