xscreensaver vulnerability

2007-06-1200:00:00

ubuntu.com

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

38.4%

JSON

Releases

Ubuntu 7.04
Ubuntu 6.10
Ubuntu 6.06

Details

It was discovered that xscreensaver did not correctly validate the
return values from network authentication systems such as LDAP or NIS.
A local attacker could bypass a locked screen if they were able to
interrupt network connectivity.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchxscreensaver< 4.24-5ubuntu2.1UNKNOWN
Ubuntu6.10noarchxscreensaver< 4.24-4ubuntu2.1UNKNOWN
Ubuntu6.06noarchxscreensaver< 4.23-4ubuntu8.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	7.04	noarch	xscreensaver	< 4.24-5ubuntu2.1	UNKNOWN
Ubuntu	6.10	noarch	xscreensaver	< 4.24-4ubuntu2.1	UNKNOWN
Ubuntu	6.06	noarch	xscreensaver	< 4.23-4ubuntu8.1	UNKNOWN