| ID |
CVE-2009-4641
|
| Summary |
gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 7.2 (as of 07-07-2010 - 04:00) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| LOCAL |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| COMPLETE |
COMPLETE |
COMPLETE |
|
| cvss-vector
via4
|
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
| refmap
via4
|
| confirm | | | mandriva | MDVSA-2010:040 | | ubuntu | USN-866-1 |
|
| statements
via4
|
| contributor | Vincent Danen | | lastmodified | 2010-03-17 | | organization | Red Hat | | statement | Not vulnerable. This issue did not affect the versions of gnome-screensaver as shipped with Red Hat Enterprise Linux 5.
|
|
| Last major update |
07-07-2010 - 04:00 |
| Published |
11-02-2010 - 21:30 |
| Last modified |
07-07-2010 - 04:00 |
