Gentoo Security Advisory GLSA 200804-12 (gnome-screensaver)

The remote host is missing updates announced in advisory GLSA 200804-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200804-12 (gnome-screensaver)

The remote host is missing updates announced in advisory GLSA 200804-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : gnome-screensaver (gnome-screensaver-5506)

This update of gnome-screensaver disallows local users to read the contents of the clipboard for a locked screen using ctrl-v. CVE-2007-6389 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Gnome屏保程序NIS认证本地非授权访问漏洞

BUGTRAQ ID: 28575 CVECAN ID: CVE-2008-0887 gnome-screensaver是用于取代xscreensaver的屏保程序。 gnome-screensaver验证用户口令的方式存在漏洞，如果启用了远程NIS认证服务器的话，能够导致网络中断的本地攻击者就可以导致gnome-screensaver崩溃，这样就打开了锁定的屏幕。 GNOME gnome-screensaver 2.22.1 GNOME ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Gnome屏保程序本地信息泄露漏洞

BUGTRAQ ID: 30096 CVECAN ID: CVE-2007-6389 gnome-screensaver是用于取代xscreensaver的屏保程序。 当登录用户返回并打开锁定的会话时，gnome-screensaver的Leave message功能会向该用户发送一条消息。这时如果本地攻击者执行了Ctrl+V操作的话，就可以读取X选择和剪贴板缓冲区的敏感信息。 GNOME gnome-screensaver 2.20 GNOME ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Gnome Screensaver本地信息泄漏漏洞

BUGTRAQ ID: 30096 CVE ID：CVE-2007-6389 CNCVE ID：CNCVE-20076389 Gnome Screensaver是一款屏幕保护管理程序。 Gnome Screensaver存在信息泄漏问题，本地攻击者可以利用漏洞获得剪贴板中的敏感信息。 屏幕保护管理程序包含一个功能，允许在返回解锁会话时返回消息给登录用户，物理能访问系统的攻击者可以通过Ctrl+V并使用点鼠标中键在解锁会话时获得剪贴板内容信息，导致敏感信息泄漏。 Linux kernel 2.6.26 -rc6 Linux kernel 2.6.25 .5 Linux kernel...

openSUSE 10 Security Update : gnome-screensaver (gnome-screensaver-5172)

An attacker could log in without a valid password if the NIS server is down. CVE-2008-0887 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnome-screensaver-5172. The text description of this...

SuSE 10 Security Update : gnome-screensaver (ZYPP Patch Number 5179)

An attacker could log in without a valid password if the NIS server is down. CVE-2008-0887 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid33251;...

openSUSE 10 Security Update : gnome-screensaver (gnome-screensaver-5175)

An attacker could log in without a valid password if the NIS server is down. CVE-2008-0887 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnome-screensaver-5175. The text description of this...

openSUSE 10 Security Update : xorg-x11-Xvnc (xorg-x11-Xvnc-5317)

This update fixes multiple vulnerabilities reported by iDefense : - CVE-2008-2360 - RENDER Extension heap buffer overflow - CVE-2008-2361 - RENDER Extension crash - CVE-2008-2362 - RENDER Extension memory corruption - CVE-2008-1379 - MIT-SHM arbitrary memory read - CVE-2008-1377 - RECORD and...

gnome-screensaver security update

2.16.1-8 Resolves: 436522 - rebuild against 5.1 nss 2.16.1-7 Resolves: 436522 - dont unlock the screen when pwent lookup fails 2.16.1-6 Resolves: 245345 - Add missing BuildRequires to fix fade in...

RHEL 5 : gnome-screensaver (RHSA-2008:0218)

An updated gnome-screensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux FasTrack 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gnome-screensaver is the GNOME project's official screen saver program. A...

gnome-screensaver loses keyboard grab when running under compiz

GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069...

gnome security update

CentOS Errata and Security Advisory CESA-2008:0197 An updated gnome-screensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gnome-screensaver is the GNOME...

GLSA-200804-12 : gnome-screensaver: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200804-12 gnome-screensaver: Privilege escalation gnome-screensaver incorrectly handles the results of the getpwuid function in the file src/setuid.c when using directory servers like NIS during a network outage, a similar issue t...

[ GLSA 200804-12 ] gnome-screensaver: Privilege escalation

Gentoo Linux Security Advisory GLSA 200804-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

gnome-screensaver privilege escalation

getpwuid exceptional conditions are not handled...

gnome-screensaver: Privilege escalation

Background gnome-screensaver is a screensaver, designed to integrate with the Gnome desktop, that can replace xscreensaver. Description gnome-screensaver incorrectly handles the results of the getpwuid function in the file src/setuid.c when using directory servers like NIS during a network outage...

Fedora 8 : gnome-screensaver-2.20.0-12.fc8 (2008-3017)

Update for advisory CVE-2008-0887 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

Fedora 7 : gnome-screensaver-2.18.2-4.fc7 (2008-2967)

Update for advisory CVE-2008-0887 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...