CVE-2009-4996

Xfce4-session 4.5.91 in Xfce does not lock the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532. NOTE: there is no general agreement that this ...

CVE-2006-7240

The vulnerability described in CVE-2006-7240 affects gnome-power-manager version 2.14.0, where the lock_on_suspend and lock_on_hibernate settings are not properly enforced. This misbehavior may allow a physically proximate attacker to access an unattended laptop during resume from suspend/hiberna...

CVE-2009-4997

gnome-power-manager 2.27.92 does not properly implement the lockonsuspend and lockonhibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a relate...

CVE-2006-7240

gnome-power-manager 2.14.0 does not properly implement the lockonsuspend and lockonhibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related...

CVE-2009-4996

The CVE-2009-4996 entry concerns Xfce4-session 4.5.91 in XFCE, where the screen is not locked when the suspend or hibernate button is pressed. This could enable physical access by nearby attackers to an unattended laptop via a resume action; it is described as related to CVE-2010-2532, with debat...

CVE-2009-4997

gnome-power-manager 2.27.92 does not properly implement the lockonsuspend and lockonhibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a relate...

CVE-2009-4997

CVE-2009-4997 affects gnome-power-manager 2.27.92. The issue is improper implementation of the lock_on_suspend and lock_on_hibernate settings, which could allow physically proximate attackers to access an unattended laptop via a resume action. This is described as a regression following an earlie...

CVE-2006-7240

gnome-power-manager 2.14.0 does not properly implement the lockonsuspend and lockonhibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related...

PT-2010-1799 · Xfce · Xfce4-Session

Name of the Vulnerable Software and Affected Versions: Xfce4-session version 4.5.91 Description: The issue concerns Xfce4-session not locking the screen when the suspend or hibernate button is pressed. This could potentially allow physically proximate attackers to access an unattended laptop via ...

CVE-2010-2532

lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action. NOTE: there is no...

CVE-2010-2532

CVE-2010-2532 affects lxsession-logout in lxsession (LXDE) as used on openSUSE 11.3 and similar setups. The flaw is that suspend/hibernate button presses do not lock the screen, potentially enabling physically proximate attackers to resume and access the unattended system. Connected advisories ti...

CVE-2010-2532

lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action. NOTE: there is no...

PT-2010-4085 · Lxde · Lxsession

Name of the Vulnerable Software and Affected Versions: lxsession versions in LXDE, as used on SUSE openSUSE 11.3 and other platforms Description: The issue concerns the behavior of lxsession-logout in LXDE when the Suspend or Hibernate button is pressed. It does not lock the screen, which might...

ATOK screen lock bypass vulnerability

Overview ATOK from JustSystems Corporation contains a screen lock bypass vulnerability. ATOK from JustSystems Corporation is a software for Japanese Kana-Kanji conversion. ATOK contains an issue with the restriction of launching external applications, which may lead to a screen lock bypass...

DEBIAN-CVE-2010-0732

gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDKWINDOWFOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an...

CVE-2010-0732

gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDKWINDOWFOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an...

CVE-2010-0732

The CVE-2010-0732 issue affects GTK+ up to 2.18.5 (as used in gnome-screensaver up to 2.28.1). It arises from implicit paints on GDK_WINDOW_FOREIGN windows, triggering an X error that can allow physically proximate attackers to bypass screen locking by repeatedly pressing Enter. Affected componen...

PT-2010-2479 · Gtk+ Team +1 · Gtk+ +1

Name of the Vulnerable Software and Affected Versions: GTK+ versions prior to 2.18.5 gnome-screensaver versions prior to 2.28.1 Description: The issue allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times, due to...

DEBIAN-CVE-2010-0414

gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor...

CVE-2010-0414

gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor...