Debian DLA-338-1 : xscreensaver security update

xscreensaver, a screensaver daemon and frontend for X11 was vulnerable to crashing when hot-swapping monitors. For Debian 6 Squeeze, this issue has been fixed in xscreensaver version 5.11-1+deb6u11. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA...

[SECURITY] [DLA 338-1] xscreensaver security update

Package : xscreensaver Version : 5.11-1+deb6u11 CVE ID : CVE-2015-8025 Debian Bug : 802914 xscreensaver, a screensaver daemon and frontend for X11 was vulnerable to crashing when hot-swapping monitors. For Debian 6 Squeeze, this issue has been fixed in xscreensaver version 5.11-1+deb6u11. Regards...

DLA-338-1 xscreensaver - security update

Bulletin has no description...

CVE-2003-0885

Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the 1 apple2, 2 xanalogtv, and 3 pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack...

CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

PT-2015-2753

Name of the Vulnerable Software and Affected Versions XScreenSaver versions prior to 5.34 Description The issue is related to a lack of proper internal consistency checks in the driver/subprocs.c file of XScreenSaver, allowing physically proximate attackers to bypass the lock screen. This can be...

FreeBSD : xscreensaver - lock bypass (4b9393b8-7c0c-11e5-a010-080027ddead3)

RedHat bugzilla reports : In dual screen configurations, unplugging one screen will cause xscreensaver to crash, leaving the screen unlocked. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database ...

xscreensaver - lock bypass

RedHat bugzilla reports: In dual screen configurations, unplugging one screen will cause xscreensaver to crash, leaving the screen unlocked...

Gentoo Linux Data Compromise

The vulnerability of the xscreensaver package up to version 5.02 in the Gentoo Linux operating system can lead to violations of privacy, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the xscreensaver-4.18 package in the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the xscreensaver-4.10 package in the Red Hat Enterprise Linux operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the xscreensaver-3.33 package in the Red Hat Enterprise Linux operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...

Oracle Linux 3 / 4 : xscreensaver (ELSA-2007-0322)

From Red Hat Security Advisory 2007:0322 : An updated xscreensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XScreenSaver is a collection of...

Oracle Linux 4 : nss_ldap (ELSA-2006-0719)

From Red Hat Security Advisory 2006:0719 : Updated nssldap packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. nssldap is a set of C library extensions that allow...

Scientific Linux Security Update : xscreensaver on SL3.0.x i386/x86_64

Alex Yamauchi discovered a flaw in the way XScreenSaver verifies user passwords. When a system is using a remote directory service for login credentials, a local attacker may be able to cause a network outage causing XScreenSaver to crash, unlocking the screen. CVE-2007-1859 %NASLMINLEVEL 70300 C...

Scientific Linux Security Update : xscreensaver on SL4 i386/x86_64

Alex Yamauchi discovered a flaw in the way XScreenSaver verifies user passwords. When a system is using a remote directory service for login credentials, a local attacker may be able to cause a network outage causing XScreenSaver to crash, unlocking the screen. CVE-2007-1859 %NASLMINLEVEL 70300 C...

CVE-2011-2292

Unspecified vulnerability in Oracle Solaris 9 and 11 Express allows local users to affect confidentiality and integrity via unknown vectors related to xscreensaver...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 9 and 11 Express allows local users to affect confidentiality and integrity via unknown vectors related to xscreensaver...

CVE-2011-2292

Unspecified vulnerability in Oracle Solaris 9 and 11 Express allows local users to affect confidentiality and integrity via unknown vectors related to xscreensaver...

PT-2011-3745

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 9 and 11 Express Description The issue affects confidentiality and integrity, allowing local users to exploit it via unknown vectors related to xscreensaver. Recommendations For Oracle Solaris version 9, at the moment,...