CVE-2008-0887

gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate attackers to gain access to the locked session, a related issue to CVE-2007-1859.

🔗 References (38)

• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html
• secalert@redhathttp://osvdb.org/35531
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2008-0197.html
• secalert@redhathttp://secunia.com/advisories/29595
• secalert@redhathttp://secunia.com/advisories/29606
• secalert@redhathttp://secunia.com/advisories/29742
• secalert@redhathttp://secunia.com/advisories/29759
• secalert@redhathttp://secunia.com/advisories/30967
• secalert@redhathttp://secunia.com/advisories/32691
• secalert@redhathttp://security.gentoo.org/glsa/glsa-200804-12.xml
• secalert@redhathttp://securitytracker.com/id?1019749
• secalert@redhathttp://www.mandriva.com/security/advisories?name=MDVSA-2008:132
• secalert@redhathttp://www.redhat.com/support/errata/RHSA-2008-0218.html
• secalert@redhathttp://www.securityfocus.com/bid/28575
• secalert@redhathttp://www.ubuntu.com/usn/USN-669-1