Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2009-4642
HistoryFeb 11, 2010 - 9:30 p.m.

CVE-2009-4642

2010-02-1121:30:00
Debian Security Bug Tracker
security-tracker.debian.org
7
gnome-screensaver
gnome-session
d-bus interface
session idle time
xfce desktop
xubuntu
mythbuntu
physically proximate attackers
unattended workstation
screen locking

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.001

Percentile

27.5%

gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended.

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.001

Percentile

27.5%

Related for DEBIANCVE:CVE-2009-4642