CVE

Id
25216  
CVE No.
CVE-2007-1859  
Status
Candidate  
Description
XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.  
Phase
Assigned (20070404)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
251107 25216 CVE-2007-1859 CONFIRM:https://issues.rpath.com/browse/RPL-1293  View
251108 25216 CVE-2007-1859 GENTOO:GLSA-200705-14  View
251109 25216 CVE-2007-1859 URL:http://security.gentoo.org/glsa/glsa-200705-14.xml  View
251110 25216 CVE-2007-1859 MANDRIVA:MDKSA-2007:097  View
251111 25216 CVE-2007-1859 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:097  View
251112 25216 CVE-2007-1859 REDHAT:RHSA-2007:0322  View
251113 25216 CVE-2007-1859 URL:http://www.redhat.com/support/errata/RHSA-2007-0322.html  View
251114 25216 CVE-2007-1859 SUSE:SUSE-SR:2007:009  View
251115 25216 CVE-2007-1859 URL:http://www.novell.com/linux/security/advisories/2007_9_sr.html  View
251116 25216 CVE-2007-1859 UBUNTU:USN-474-1  View
251117 25216 CVE-2007-1859 URL:http://www.ubuntu.com/usn/usn-474-1  View
251118 25216 CVE-2007-1859 BID:23783  View
251119 25216 CVE-2007-1859 URL:http://www.securityfocus.com/bid/23783  View
251120 25216 CVE-2007-1859 OSVDB:35531  View
251121 25216 CVE-2007-1859 URL:http://osvdb.org/35531  View
251122 25216 CVE-2007-1859 OVAL:oval:org.mitre.oval:def:11459  View
251123 25216 CVE-2007-1859 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11459  View
251124 25216 CVE-2007-1859 SECTRACK:1017996  View
251125 25216 CVE-2007-1859 URL:http://www.securitytracker.com/id?1017996  View
251126 25216 CVE-2007-1859 SECUNIA:25065  View
251127 25216 CVE-2007-1859 URL:http://secunia.com/advisories/25065  View
251128 25216 CVE-2007-1859 SECUNIA:25105  View
251129 25216 CVE-2007-1859 URL:http://secunia.com/advisories/25105  View
251130 25216 CVE-2007-1859 SECUNIA:25118  View
251131 25216 CVE-2007-1859 URL:http://secunia.com/advisories/25118  View
251132 25216 CVE-2007-1859 SECUNIA:25116  View
251133 25216 CVE-2007-1859 URL:http://secunia.com/advisories/25116  View
251134 25216 CVE-2007-1859 SECUNIA:25119  View
251135 25216 CVE-2007-1859 URL:http://secunia.com/advisories/25119  View
251136 25216 CVE-2007-1859 SECUNIA:25225  View
251137 25216 CVE-2007-1859 URL:http://secunia.com/advisories/25225  View
251138 25216 CVE-2007-1859 SECUNIA:25610  View
251139 25216 CVE-2007-1859 URL:http://secunia.com/advisories/25610  View
251140 25216 CVE-2007-1859 XF:xscreensaver-getpwuid-authentication-bypass(34054)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51726 JVNDB-2007-000389 Linux Kernel の nl_fib_lookup() 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の nl_fib_lookup() 関数には、NETLINK_FIB_LOOKUP の応答処理に不備が存在するために、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-1861 25216 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000389.html  View