NVD

Id
54030  
Name
CVE-2007-1859  
Description
XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-05-02  
Modified Date
2012-11-05  
Seq
2007-1859  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
273947 54030 CVE-2007-1859 oval:org.mitre.oval:def:11459  View
273948 54030 CVE-2007-1859 GLSA-200705-14  View
273949 54030 CVE-2007-1859 MDKSA-2007:097  View
273950 54030 CVE-2007-1859 SUSE-SR:2007:009  View
273951 54030 CVE-2007-1859 RHSA-2007:0322  View
273952 54030 CVE-2007-1859 23783  View
273953 54030 CVE-2007-1859 1017996  View
273954 54030 CVE-2007-1859 USN-474-1  View
273955 54030 CVE-2007-1859 xscreensaver-getpwuid-authentication-bypass(34054)  View
273956 54030 CVE-2007-1859 https://issues.rpath.com/browse/RPL-1293  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51669 JVNDB-2007-000332 XScreenSaver のクラッシュによりスクリーンロックが解除される問題 XScreenSaver には、ログイン認証にリモートのディレクトリサービスを利用するシステムにおいて、ネットワーク接続を不可能にすることで XScreenSaver がクラッシュしスクリーンロックを解除できる問題があります。 CVE-2007-1859 25214 CVE-2007-1859 54030 4.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000332.html 2007-05-03 2014-05-14 View