openSUSE 10 Security Update : xscreensaver (xscreensaver-3240)

xscreensaver could crash under certain circumstances and so cause unlocking the screen. That could happen for example when LDAP is used for authentication and the network connection gets interrupted for a long time CVE-2007-1859. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

CVE-2007-3283

GNOME XScreenSaver in Sun Solaris 8 and 9 before 20070417, when root is logged into the console, does not automatically lock the screen after a session has been inactive, which might allow physically proximate attackers to access the console...

Code injection

GNOME XScreenSaver in Sun Solaris 8 and 9 before 20070417, when root is logged into the console, does not automatically lock the screen after a session has been inactive, which might allow physically proximate attackers to access the console...

CVE-2007-3283

GNOME XScreenSaver in Sun Solaris 8 and 9 before 20070417, when root is logged into the console, does not automatically lock the screen after a session has been inactive, which might allow physically proximate attackers to access the console...

CVE-2007-3283

GNOME XScreenSaver in Sun Solaris 8 and 9 before 20070417, when root is logged into the console, does not automatically lock the screen after a session has been inactive, which might allow physically proximate attackers to access the console...

CVE-2007-3283

The CVE-2007-3283 issue concerns GNOME XScreenSaver on Sun Solaris 8/9 where, if the root user is logged in at the console, the session does not auto-lock after inactivity, potentially allowing a nearby attacker to access the console. Connected Nessus patch entries for Solaris 10 x86/sparc refere...

CVE-2007-3283

GNOME XScreenSaver in Sun Solaris 8 and 9 before 20070417, when root is logged into the console, does not automatically lock the screen after a session has been inactive, which might allow physically proximate attackers to access the console...

CVE-2007-3283: Undefined Security Weakness

GNOME XScreenSaver in Sun Solaris 8 and 9 before 20070417, when root is logged into the console, does not automatically lock the screen after a session has been inactive, which might allow physically proximate attackers to access the console...

USN-474-1: xscreensaver vulnerability

It was discovered that xscreensaver did not correctly validate the return values from network authentication systems such as LDAP or NIS. A local attacker could bypass a locked screen if they were able to interrupt network connectivity...

Session fixation

xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence...

CVE-2007-3069

xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence...

CVE-2007-3069

CVE-2007-3069 affects Sun Solaris 10 prior to patch 120095-36 (x86) / 120094-36 (sparc) where an active GNOME session with Assistive Technology support can be hijacked via an Alt-Tab sequence when a local attacker has physical access. The description from the primary source specifies the vulnerab...

CVE-2007-3069

xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence...

CVE-2007-3069: Undefined Security Weakness

xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence...

GLSA-200705-14 : XScreenSaver: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200705-14 XScreenSaver: Privilege escalation XScreenSaver incorrectly handles the results of the getpwuid function in drivers/lock.c when using directory servers during a network outage. Impact : A local user can crash XScreenSave...

XScreenSaver: Privilege escalation

Background XScreenSaver is a widely used screen saver collection shipped on systems running the X11 Window System. Description XScreenSaver incorrectly handles the results of the getpwuid function in drivers/lock.c when using directory servers during a network outage. Impact A local user can cras...

Important: xscreensaver security update

4.18-5.rhel4.14.0.1 - modify xscreensaver-fortune-standin to use enterprise-release 4.18-5.rhel4.14 - check for null return value in getpwuid call CVE-2007-1859, Resolves: 237003...

[ MDKSA-2007:097 ] - Updated xscreensaver packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:097 http://www.mandriva.com/security/ Package : xscreensaver Date : May 2, 2007 Affected: 2007.0, 2007.1, Corporate 3.0 Problem Description: A problem with the way xscreensaver verifies user passwords was...

xscreensaver console access protection bypass

Application crashes on network link failure, if remote authentication is used. It makes it possible to access protected X session...

xscreensaver security update

CentOS Errata and Security Advisory CESA-2007:0322-01 An updated xscreensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XScreenSaver is a...