Gnome gnome-session buffer overflow vulnerability

Gnome-session is a session tool for the Gnome 2.x desktop environment. A buffer overflow vulnerability exists in the 'main.c' script of nome gnome-session, which stems from the program's failure to perform proper bounds checking on user-submitted input. An attacker could use this vulnerability to...

Moderate: Red Hat Security Advisory: vino security update

Updated vino packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Scientific Linux Security Update : vino on SL6.x i386/x86_64 (20130121)

It was found that Vino transmitted all clipboard activity on the system running Vino to all clients connected to port 5900, even those who had not authenticated. A remote attacker who is able to access port 5900 on a system running Vino could use this flaw to read clipboard data without...

vino security update

CentOS Errata and Security Advisory CESA-2013:0169 An updated vino package that fixes several security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

SuSE 11 Security Update : glib2 (SAT Patch Number 1831)

When copying symbolic links the gfilecopy function set the target of the link to mode 0777 therefore exposing potentially sensitive information or allowing other user to modify files they should not have access to CVE-2009-3289. This has been fixed. This update also fixes a problem where glib2...

CVE-2009-4642

gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

Code injection

gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

DEBIAN-CVE-2009-4642

gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

CVE-2009-4642

gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

CVE-2009-4642

gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

MDVA-2008:098 : gnome-session

Gnome-session was not migrating files from the old GNOME trash system to its new location at login, preventing old trash management with Nautilus. This package fixes the issue and provides new translations from GNOME 2.22.2. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

Mandriva Update for gnome-power-manager MDVA-2008:165 (gnome-power-manager)

Check for the Version of gnome-power-manager OpenVAS Vulnerability Test Mandriva Update for gnome-power-manager MDVA-2008:165 gnome-power-manager Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for gnome-session MDVA-2008:098 (gnome-session)

Check for the Version of gnome-session OpenVAS Vulnerability Test Mandriva Update for gnome-session MDVA-2008:098 gnome-session Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

Mandriva Update for gnome-session MDVA-2008:098 (gnome-session)

Check for the Version of gnome-session OpenVAS Vulnerability Test Mandriva Update for gnome-session MDVA-2008:098 gnome-session Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

Mandriva Update for evolution-data-server MDKA-2007:130 (evolution-data-server)

Check for the Version of evolution-data-server OpenVAS Vulnerability Test Mandriva Update for evolution-data-server MDKA-2007:130 evolution-data-server Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

CVE-2008-5684

Unspecified vulnerability in the X Inter Client Exchange library aka libICE in Sun Solaris 8 through 10 and OpenSolaris before snv85 allows context-dependent attackers to cause a denial of service application crash, as demonstrated by a port scan that triggers a segmentation violation in the Gnom...

Session fixation

Unspecified vulnerability in the X Inter Client Exchange library aka libICE in Sun Solaris 8 through 10 and OpenSolaris before snv85 allows context-dependent attackers to cause a denial of service application crash, as demonstrated by a port scan that triggers a segmentation violation in the Gnom...

CVE-2008-5684

CVE-2008-5684 affects Sun Solaris 8–10 and OpenSolaris before snv_85 due to a libICE issue; allows context-dependent denial of service, shown by a port-scan-triggered segmentation fault in gnome-session. Connected docs reference Xsun/X11 patches for Solaris 10, but explicit libICE remediation det...

Session fixation

xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence...

XFree86: libICE DoS

Hi, I've been sitting on this one for a while. SUMMARY ======= Due to inadequate bounds checking in libICE, a denial of service exists with any application using inet listening libICE for network services. Unfortunately, there is a fairly prominent user of libICE, namely gnome-session. The...