|
|
>> Ubuntu Security Update Gnome-screensaver Security Bypass Vulnerability
|
Title : Ubuntu Security Update Gnome-screensaver Security Bypass Vulnerability
VUPEN ID : VUPEN/ADV-2007-3616
CVE ID : CVE-2007-3920
Rated as : Low Risk 
Remotely Exploitable : No
Locally Exploitable : Yes
Release Date : 2007-10-25
|
A vulnerability has been identified in Ubuntu, which could be exploited by local attackers to bypass security restrictions. This issue is caused by an error in gnome-screensaver when running under Compiz, which could allow attackers with physical access to gain access to the locked session.
Affected Products
Ubuntu 7.10
Solution
Upgrade to gnome-screensaver version 2.20.0-0ubuntu4.2
References
http://www.vupen.com/english/advisories/2007/3616
http://www.ubuntu.com/usn/usn-537-1
ChangeLog
2007-10-25 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
