Debian Security Bug TrackerDEBIANCVE:CVE-2009-4997CVE-2009-4997
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
Percentile
26.7%
gnome-power-manager 2.27.92 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532. NOTE: this issue exists because of a regression that followed a gnome-power-manager fix a few years earlier.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | gnome-power-manager | < 2.28.0-1 | gnome-power-manager_2.28.0-1_all.deb |
| Debian | 11 | all | gnome-power-manager | < 2.28.0-1 | gnome-power-manager_2.28.0-1_all.deb |
| Debian | 999 | all | gnome-power-manager | < 2.28.0-1 | gnome-power-manager_2.28.0-1_all.deb |
| Debian | 13 | all | gnome-power-manager | < 2.28.0-1 | gnome-power-manager_2.28.0-1_all.deb |
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
Percentile
26.7%