CVE-2008-0887
Published: 6 April 2008
gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate attackers to gain access to the locked session, a related issue to CVE-2007-1859.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
gnome-screensaver Launchpad, Ubuntu, Debian |
dapper |
Released
(2.14.3-0ubuntu1.1)
|
| edgy |
Ignored
(end of life, was needs-triage)
|
|
| feisty |
Ignored
(end of life, was needs-triage)
|
|
| gutsy |
Released
(2.20.0-0ubuntu4.3)
|
|
| hardy |
Released
(2.22.1-0ubuntu1)
|
|
| intrepid |
Released
(2.22.1-0ubuntu1)
|
|
| upstream |
Needs triage
|
|
|
Patches: upstream: http://svn.gnome.org/viewvc/gnome-screensaver/trunk/src/gnome-screensaver-dialog.c?r1=1319&r2=1418 upstream: http://svn.gnome.org/viewvc/gnome-screensaver/trunk/src/setuid.c?r1=2&r2=1418 |
||