Lucene search
RootSSV:3578HistoryJul 09, 2008 - 12:00 a.m.
Gnome屏保程序NIS认证本地非授权访问漏洞
2008-07-0900:00:00
Root
www.seebug.org
19
0.005 Low
EPSS
Percentile
72.4%
BUGTRAQ ID: 28575
CVE(CAN) ID: CVE-2008-0887
gnome-screensaver是用于取代xscreensaver的屏保程序。
gnome-screensaver验证用户口令的方式存在漏洞，如果启用了远程NIS认证服务器的话，能够导致网络中断的本地攻击者就可以导致gnome-screensaver崩溃，这样就打开了锁定的屏幕。
GNOME gnome-screensaver < 2.22.1
GNOME
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
<a href=“http://live.gnome.org/GnomeScreensaver/” target=“_blank”>http://live.gnome.org/GnomeScreensaver/</a>
RedHat
RedHat已经为此发布了一个安全公告（RHSA-2008:0197-01）以及相应补丁:
RHSA-2008:0197-01：Moderate: gnome-screensaver security update
链接：<a href=“https://www.redhat.com/support/errata/RHSA-2008-0197.html” target=“_blank”>https://www.redhat.com/support/errata/RHSA-2008-0197.html</a>
Related
openvas
openvas
Gentoo Security Advisory GLSA 200804-12 (gnome-screensaver)
2008-09-24 00:00:00
SLES10: Security update for xscreensaver
2009-10-13 00:00:00
Oracle: Security Advisory (ELSA-2008-0218)
2015-10-08 00:00:00
securityvulns
securityvulns
[ GLSA 200804-12 ] gnome-screensaver: Privilege escalation
2008-04-14 00:00:00
gnome-screensaver privilege escalation
2008-04-14 00:00:00
nessus
nessus
Fedora 8 : gnome-screensaver-2.20.0-12.fc8 (2008-3017)
2008-04-11 00:00:00
Fedora 7 : gnome-screensaver-2.18.2-4.fc7 (2008-2967)
2008-04-11 00:00:00
Oracle Linux 5 : gnome-screensaver (ELSA-2008-0197)
2013-07-12 00:00:00
gentoo
gentoo
gnome-screensaver: Privilege escalation
2008-04-11 00:00:00
centos
centos
gnome security update
2008-04-24 02:22:02
oraclelinux
oraclelinux
gnome-screensaver security update
2008-04-02 00:00:00
gnome-screensaver security update
2008-05-30 00:00:00
redhat
redhat
(RHSA-2008:0197) Moderate: gnome-screensaver security update
2008-04-02 00:00:00
(RHSA-2008:0218) Moderate: gnome-screensaver security update
2008-05-21 09:59:44
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:27:00
prion
prion
Sql injection
2008-04-06 23:44:00
Design/Logic Flaw
2008-04-06 23:44:00
fedora
fedora
[SECURITY] Fedora 7 Update: gnome-screensaver-2.18.2-4.fc7
2008-04-09 05:19:33
[SECURITY] Fedora 8 Update: gnome-screensaver-2.20.0-12.fc8
2008-04-09 05:22:40
ubuntucve
ubuntucve
CVE-2008-0887
2008-04-06 00:00:00
cvelist
cvelist
CVE-2008-0887
2008-04-06 23:00:00
cve
cve
CVE-2008-1683
2008-04-06 23:44:00
CVE-2008-0887
2008-04-06 23:44:00
ubuntu
ubuntu
gnome-screensaver vulnerabilities
2008-11-11 00:00:00
debiancve
debiancve
CVE-2008-0887
2008-04-06 23:44:00