351 matches found
Code injection
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...
CVE-2015-8025
CVE-2015-8025 affects the xscreensaver component in XScreenSaver prior to 5.34. The issue is a faulty internal consistency check that can let someone with physical access bypass the lock screen by hot-swapping monitors, exploiting a local access scenario. Public advisories describe the impact as ...
CVE-2015-8025
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...
CVE-2015-8025
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...
CVE-2015-8025: Undefined Security Weakness
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...
Mageia: Security Advisory (MGASA-2015-0431)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for xscreensaver FEDORA-2015-0
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2015-0431 Updated xscreensaver package fixes security vulnerability
The updated xscreensaver packages fix a security issue when used, in some cases, with dual screen and unplugging one of them...
Updated xscreensaver package fixes security vulnerability
The updated xscreensaver packages fix a security issue when used, in some cases, with dual screen and unplugging one of them...
[SECURITY] Fedora 21 Update: xscreensaver-5.34-1.fc21
A modular screen saver and locker for the X Window System. More than 200 display modes are included in this package. This is a metapackage for installing all default packages related to XScreenSaver...
Ubuntu: Security Advisory (USN-2789-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 12.04 LTS : xscreensaver vulnerability (USN-2789-1)
It was discovered that XScreenSaver incorrectly handled unplugging an external monitor. An attacker with physical access could use this flaw to gain access to a locked session. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...
USN-2789-1: XScreenSaver vulnerability
It was discovered that XScreenSaver incorrectly handled unplugging an external monitor. An attacker with physical access could use this flaw to gain access to a locked session...
[SECURITY] Fedora 23 Update: xscreensaver-5.34-1.fc23
A modular screen saver and locker for the X Window System. More than 200 display modes are included in this package. This is a metapackage for installing all default packages related to XScreenSaver...
Debian DLA-338-1 : xscreensaver security update
xscreensaver, a screensaver daemon and frontend for X11 was vulnerable to crashing when hot-swapping monitors. For Debian 6 Squeeze, this issue has been fixed in xscreensaver version 5.11-1+deb6u11. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA...
[SECURITY] [DLA 338-1] xscreensaver security update
Package : xscreensaver Version : 5.11-1+deb6u11 CVE ID : CVE-2015-8025 Debian Bug : 802914 xscreensaver, a screensaver daemon and frontend for X11 was vulnerable to crashing when hot-swapping monitors. For Debian 6 Squeeze, this issue has been fixed in xscreensaver version 5.11-1+deb6u11. Regards...
DLA-338-1 xscreensaver - security update
Bulletin has no description...
CVE-2003-0885
Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the 1 apple2, 2 xanalogtv, and 3 pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack...
CVE-2015-8025
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...
FreeBSD : xscreensaver - lock bypass (4b9393b8-7c0c-11e5-a010-080027ddead3)
RedHat bugzilla reports : In dual screen configurations, unplugging one screen will cause xscreensaver to crash, leaving the screen unlocked. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database ...